PKI & HSM Engineer — Secure Identity Automation Lead

Schneider Electric; Bellprat; Presencial; EUR 50.000 - 90.000; Jornada completa

Descripción de la vacante

Schneider Electric is seeking a Tech Engineer with PKI and HSM expertise to operate and evolve our enterprise PKI environment. You will focus on secure certificate lifecycle management, key protection, and integration with IAM capabilities.

The role involves design and automation, proactive monitoring, and collaboration with Architecture to validate new PKI evolutions, ensuring compliance with security standards across the organization.

Formación

• Experience in Public Key Infrastructure (PKI) and Hardware Security Modules (HSMs).
• Operate, maintain, and evolve enterprise PKI environment with secure certificate lifecycle management.
• Support identity functions and access management with related modules.

Responsabilidades

• Administer and maintain enterprise PKI components with a focus on Keyfactor EJBCA and Keyfactor Command or similar platforms.
• Design, configure, and manage certificate profiles, CA hierarchies, enrollment processes, and certificate lifecycle workflows.
• Ensure secure key generation, storage, and management leveraging HSMs.
• Conduct proactive monitoring, health checks, maintenance, upgrades, and patching of PKI systems.
• Troubleshoot certificate-related issues across servers, applications, and infrastructure components.
• Perform cryptographic operations and validation using tools like OpenSSL.
• Ensure PKI compliance with internal policies, security standards, and audit requirements.
• Develop and maintain automation scripts (Bash, Python, PowerShell) for operational efficiency.
• Provide L3 engineering support for PKI and related cryptographic services.
• Produce periodic operational reports and assist in the remediation of audit and compliance findings.
• Document technical procedures, architecture, and operational runbooks.
• Collaborate with Architecture to conduct proofs of concept to validate evolutions or solutions.

Conocimientos

PKI engineering

HSM management

OpenSSL

Bash scripting

Python scripting

PowerShell

Identity & access management

Automation

Herramientas

Keyfactor EJBCA

Keyfactor Command

OpenSSL

Descripción del empleo

Schneider Electric is seeking a Tech Engineer with PKI and HSM expertise to operate and evolve our enterprise PKI environment. You will focus on secure certificate lifecycle management, key protection, and integration with IAM capabilities.

The role involves design and automation, proactive monitoring, and collaboration with Architecture to validate new PKI evolutions, ensuring compliance with security standards across the organization.