Experteer Overview
In this role you will operate and advance the enterprise PKI environment, ensuring secure certificate lifecycle management and robust key protection. You will work within a cross-functional team to translate client needs into secure capabilities, perform installation and configuration, and monitor PKI/HSM health. You’ll handle break/fix, upgrades, patches, and audits while collaborating with Architecture on proofs-of-concept. This position is embedded in Schneider Digital, contributing to the company’s digital transformation and security-focused initiatives.

Compensaciones / Incentivos
• Administer and maintain enterprise PKI components (Keyfactor EJBCA, Keyfactor Command)
• Design and manage certificate profiles, CA hierarchies, enrollment, and lifecycle workflows
• Ensure secure key generation, storage, and HSM-based protection
• Perform proactive monitoring, maintenance, upgrades, and patching of PKI systems
• Troubleshoot certificate issues across servers, apps, and infrastructure
• Execute cryptographic operations with OpenSSL
• Ensure PKI compliance with internal policies and audit requirements
• Develop automation scripts (Bash, Python, PowerShell) for operations
• Provide L3 PKI engineering support and produce operational reports
• Document procedures, architecture, and runbooks




• Collaborate with Architecture on proofs of concept to validate evolutions or solutions
• Support critical identity functions, including patching and upgrades of related modules
• Coordinate with customers’ networks and operations teams to resolve issues or security concerns
• Work with vendors to troubleshoot and resolve issues related to security tools

Responsabilidades
• Bachelor's degree in computer science, Engineering, or equivalent experience
• ≥3 years in PKI engineering and certificate services
• Experience with AWS Cloud and Microsoft Identity services (AD/AAD)
• Strong knowledge of X.509, RSA, certificate chains, and certificate lifecycle management
• Linux and/or Windows administration and troubleshooting
• Scripting in PowerShell, Bash, or Python
• Hands-on with HSMs and cryptographic tools (OpenSSL)
• Ability to work with teams and vendors to resolve complex PKI/platform issues
• Experience in enterprise security/compliance environments
• Proven collaboration with clients/architects to provide best-practice security guidance
• Fluent in English with strong communication/documentation skills

Requisitos principales
• hybrid work plan
• flexible schedule
• Wellwo wellbeing platform
• medical service at workplace
• share ownership program
• Career Hub and learning platforms

📌 Lead, PKI Technical Engineer (Barcelona)
🏢 Schneider Electric
📍 Barcelona