Senior PKI & HSM Engineer — Enterprise Security

Schneider Electric; Barcelona; Hybrid; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid work plan

Flexible remuneration plan

Stock ownership program

Volunteer programs

Job summary

Schneider Electric seeks an experienced PKI Engineer to operate, maintain, and advance our enterprise PKI environment and certificate lifecycle management. You will implement secure key management with HSMs, configure Keyfactor/EJBCA, and collaborate with global teams to meet security and compliance needs.

You will build automation, monitor system health, and support audits while working in a hybrid setup within our Barcelona Digital Hub. Strong English communication is essential.

Qualifications

• Bachelor’s degree in computer science or engineering or equivalent.
• 3+ years in PKI engineering and certificate services, AWS Cloud, AD/AAD.
• Strong understanding of X.509, RSA, certificate lifecycles, and PKI concepts.
• Experience with Linux and/or Windows administration and troubleshooting.
• Proficient scripting in PowerShell, Bash, or Python.
• Experience with HSMs and cryptographic tooling (OpenSSL).
• Ability to collaborate with vendors/teams and support security/compliance requirements.

Responsibilities

• Operate, maintain, and evolve enterprise PKI environment and certificate lifecycle management.
• Configure and manage PKI platforms like Keyfactor EJBCA/Command.
• Ensure secure key generation and HSM-based protection.
• Monitor health, perform upgrades, patches, and audits.
• Provide L3 engineering support for PKI and cryptographic services.
• Create/run automation scripts and operational runbooks.

Skills

PKI engineering

HSMs

Keyfactor EJBCA

Keyfactor Command

OpenSSL

Python

Bash

PowerShell

Linux

Windows

AWS Cloud

Active Directory / Azure AD

Cryptographic tools

English communication

Education

Bachelor’s degree in computer science or engineering

Tools

Keyfactor

EJBCA

OpenSSL

CyberArk

Job description

Schneider Electric seeks an experienced PKI Engineer to operate, maintain, and advance our enterprise PKI environment and certificate lifecycle management. You will implement secure key management with HSMs, configure Keyfactor/EJBCA, and collaborate with global teams to meet security and compliance needs.

You will build automation, monitor system health, and support audits while working in a hybrid setup within our Barcelona Digital Hub. Strong English communication is essential.