Experteer Overview

Descubra exactamente qué habilidades, experiencia y cualificaciones necesitará para tener éxito en este puesto antes de enviar su solicitud a continuación.

In this role you will operate and advance the enterprise PKI environment, ensuring secure certificate lifecycle management and robust key protection. You will work within a cross-functional team to translate client needs into secure capabilities, perform installation and configuration, and monitor PKI/HSM health. You’ll handle break/fix, upgrades, patches, and audits while collaborating with Architecture on proofs-of-concept.

This position is embedded in Schneider Digital, contributing to the company’s digital transformation and security-focused initiatives.

Compensaciones / Ventajas

- Administer and maintain enterprise PKI components (Keyfactor EJBCA, Keyfactor Command)
- Design and manage certificate profiles, CA hierarchies, enrollment, and lifecycle workflows
- Ensure secure key generation, storage, and HSM-based protection
- Perform proactive monitoring, maintenance, upgrades, and patching of PKI systems
- Troubleshoot certificate issues across servers, apps, and infrastructure
- Execute cryptographic operations with OpenSSL
- Ensure PKI compliance with internal policies and audit requirements
- Develop automation scripts (Bash, Python, PowerShell) for operations
- Provide L3 PKI engineering support and produce operational reports
- Document procedures,



architecture, and runbooks
- Collaborate with Architecture on proofs of concept to validate evolutions or solutions
- Support critical identity functions, including patching and upgrades of related modules
- Coordinate with customers’ networks and operations teams to resolve issues or security concerns
- Work with vendors to troubleshoot and resolve issues related to security tools

Responsabilidades

- Bachelor's degree in computer science, Engineering, or equivalent experience
- ≥3 years in PKI engineering and certificate services
- Experience with AWS Cloud and Microsoft Identity services (AD/AAD)
- Strong knowledge of X.509, RSA, certificate chains, and certificate lifecycle management xugodme
- Linux and/or Windows administration and troubleshooting
- Scripting in PowerShell, Bash, or Python
- Hands-on with HSMs and cryptographic tools (OpenSSL)
- Ability to work with teams and vendors to resolve complex PKI/platform issues
- Experience in enterprise security/compliance environments
- Proven collaboration with clients/architects to provide best-practice security guidance
- Fluent in English with strong communication/documentation skills

Requisitos principales

- hybrid work plan
- flexible schedule
- Wellwo wellbeing platform
- medical service at workplace
- share ownership program
- Career Hub and learning platforms

📌 Lead, PKI Technical Engineer (Barcelona)
🏢 Schneider Electric
📍 Barcelona