Lead, PKI Technical Engineer

Schneider Electric; Bellprat; Presencial; EUR 50.000 - 90.000; Jornada completa

Descripción de la vacante

Schneider Electric is seeking a Tech Engineer with PKI and HSM expertise to operate and evolve our enterprise PKI environment. You will focus on secure certificate lifecycle management, key protection, and integration with IAM capabilities.

The role involves design and automation, proactive monitoring, and collaboration with Architecture to validate new PKI evolutions, ensuring compliance with security standards across the organization.

Formación

• Experience in Public Key Infrastructure (PKI) and Hardware Security Modules (HSMs).
• Operate, maintain, and evolve enterprise PKI environment with secure certificate lifecycle management.
• Support identity functions and access management with related modules.

Responsabilidades

• Administer and maintain enterprise PKI components with a focus on Keyfactor EJBCA and Keyfactor Command or similar platforms.
• Design, configure, and manage certificate profiles, CA hierarchies, enrollment processes, and certificate lifecycle workflows.
• Ensure secure key generation, storage, and management leveraging HSMs.
• Conduct proactive monitoring, health checks, maintenance, upgrades, and patching of PKI systems.
• Troubleshoot certificate-related issues across servers, applications, and infrastructure components.
• Perform cryptographic operations and validation using tools like OpenSSL.
• Ensure PKI compliance with internal policies, security standards, and audit requirements.
• Develop and maintain automation scripts (Bash, Python, PowerShell) for operational efficiency.
• Provide L3 engineering support for PKI and related cryptographic services.
• Produce periodic operational reports and assist in the remediation of audit and compliance findings.
• Document technical procedures, architecture, and operational runbooks.
• Collaborate with Architecture to conduct proofs of concept to validate evolutions or solutions.

Conocimientos

PKI engineering

HSM management

OpenSSL

Bash scripting

Python scripting

PowerShell

Identity & access management

Automation

Herramientas

Keyfactor EJBCA

Keyfactor Command

OpenSSL

Descripción del empleo

We are your Energy Technology Partner. We electrify, automate, and digitalize every industry, business, and home, driving efficiency and sustainability for all.

At Schneider Electric, our values - IMPACT (Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork) - are the foundation of everything we do. Becoming an Impact Maker means turning sustainability ambitions into actions at the intersection of automation, electrification, and digitization.

Are you ready to lead the digital transformation to create a more sustainable world?

If you are up to challenge your creativity and make an impact, we are excited to welcome you!

Schneider Digital is the digital department of Schneider Electric, leading the digital transformation in the company by giving support globally to our internal teams and our clients. Schneider Digital consists of 6 Digital Hubs worldwide which are strategically located to ensure a 24/7 support across the company (France, China, India, USA, Mexico and Spain). Our Digital Hub in Barcelona is formed by +450 employees working in strategic projects and different roles such as Data, Cybersecurity, ERP, Cloud, Infrastructures, IT Project Management or Digital Marketing.

Schneider Electric has an exciting opportunity for a Tech Engineer with experience in Public Key Infrastructure (PKI) and Hardware Security Modules (HSMs).

The primary focus of this role is to operate, maintain, and evolve our enterprise PKI environment, ensuring secure certificate lifecycle management and robust key protection.

Work on a team as identity and access management engineer, including leveraging the capabilities of the tools and techniques in SE to translate a client's needs into a working capability. Apply expertise in the installation, deployment and configuration of the different platforms. You'll be keeping them in good shape, including conducting maintenance activities, monitoring the health of the platform, and conducting proactive monitoring of PKI/HSM. Support any break/fix, upgrades, patches, and performance or integration related issues. Maintain responsibility for scheduling periodic reports and addressing audit findings. Support critical Identity functions, including maintenance, patch identification and publication, and upgrades of any related modules. You'll collaborate with Architecture to conduct diverse proofs of concept to validate evolutions or solutions.

Key Responsibilities

Primary Scope: PKI Engineering

• Administer and maintain enterprise PKI components with a focus on Keyfactor EJBCA and Keyfactor Command or similar platforms.
• Design, configure, and manage certificate profiles, CA hierarchies, enrollment processes, and certificate lifecycle workflows.
• Ensure secure key generation, storage, and management leveraging HSMs.
• Conduct proactive monitoring, health checks, maintenance, upgrades, and patching of PKI systems.
• Troubleshoot certificate-related issues across servers, applications, and infrastructure components.
• Perform cryptographic operations and validation using tools like OpenSSL.
• Ensure PKI compliance with internal policies, security standards, and audit requirements.

Operational Responsibilities

• Develop and maintain automation scripts (Bash, Python, PowerShell) for operational efficiency.
• Provide L3 engineering support for PKI and related cryptographic services.
• Produce periodic operational reports and assist in the remediation of audit and compliance findings.
• Document technical procedures, architecture, and operational runbooks.

What qualifications will make you successful for this role?