Senior PKI & HSM Security Engineer

Schneider Electric; Barcelona; Híbrido; EUR 55.000 - 85.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work plan

Shareholder stock ownership program

Flexible benefits

Descripción de la vacante

Schneider Electric is seeking a Tech Engineer with PKI and HSM expertise to operate and evolve our enterprise PKI environment. You will manage certificate lifecycles, enforce secure key storage, and monitor platform health across Linux/Windows environments.

You will collaborate with architecture and client teams to implement secure, compliant PKI solutions, while developing automation and supporting audit findings in a hybrid Barcelona-based setting.

Formación

• Bachelor's degree in computer science, engineering, or equivalent experience.
• At least 3 years in PKI engineering and certificate services, AWS Cloud, and Microsoft Identity services like AD/AAD.
• Deep understanding of X.509, RSA, certificate chains, key usage, CRL/OCSP.
• Certificate lifecycle management and CA operations.
• Strong Linux and/or Windows administration and troubleshooting.
• Scripting abilities in PowerShell, Bash, or Python.
• Practical experience implementing and troubleshooting HSMs.
• Experience with cryptographic tools such as OpenSSL.
• Ability to work with teams and vendors to resolve PKI/platform issues.
• Fluent in English; strong communication and documentation skills.

Responsabilidades

• Administer and maintain enterprise PKI components with Keyfactor EJBCA/Keyfactor Command.
• Design, configure, and manage certificate profiles, CA hierarchies, enrollment processes, and certificate workflows.
• Ensure secure key generation, storage, and management leveraging HSMs.
• Conduct proactive monitoring, health checks, maintenance, upgrades, and patching of PKI systems.
• Troubleshoot certificate-related issues across servers, applications, and infrastructure.
• Perform cryptographic operations and validation with OpenSSL.
• Ensure PKI compliance with internal policies and audit requirements.
• Develop automation scripts (Bash, Python, PowerShell) for operational efficiency.
• Provide L3 engineering support for PKI and related cryptographic services.
• Produce periodic operational reports and address audit/compliance findings.

Conocimientos

Fluent in English

Security mindset

Analytical thinking

Cross-functional collaboration

Scripting (PowerShell, Bash, Python)

Educación

Bachelor's degree in Computer Science or Engineering

Herramientas

Keyfactor EJBCA

Keyfactor Command

OpenSSL

HSMs

AWS Cloud

AD/AAD (Microsoft Identity)

Descripción del empleo

Schneider Electric is seeking a Tech Engineer with PKI and HSM expertise to operate and evolve our enterprise PKI environment. You will manage certificate lifecycles, enforce secure key storage, and monitor platform health across Linux/Windows environments.

You will collaborate with architecture and client teams to implement secure, compliant PKI solutions, while developing automation and supporting audit findings in a hybrid Barcelona-based setting.