We are your Energy Technology Partner. We electrify, automate, and digitalize every industry, business, and home, driving efficiency and sustainability for all.

At Schneider Electric, our values – IMPACT (Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork) – are the foundation of everything we do. Becoming an Impact Maker means turning sustainability ambitions into actions at the intersection of automation, electrification, and digitization.

Are you ready to lead the digital transformation to create a more sustainable world?

If you are up to challenge your creativity and make an impact, we are excited to welcome you

Schneider Digital is the digital department of Schneider Electric, leading the digital transformation in the company by giving support globally to our internal teams and our clients. Schneider Digital consists of 6 Digital Hubs worldwide which are strategically located to ensure a 24/7 support across the company (France, China, India, USA, Mexico and Spain). Our Digital Hub in Barcelona is formed by +450 employees working in strategic projects and different roles such as Data, Cybersecurity, ERP, Cloud, Infrastructures, IT Project Management or Digital Marketing.

Schneider Electric has an exciting opportunity for a Tech Engineer with experience in Public Key Infrastructure (PKI) and Hardware Security Modules (HSMs).

The primary focus of this role is to operate, maintain, and evolve our enterprise PKI environment, ensuring secure certificate lifecycle management and robust key protection.

Work on a team as identity and access management engineer, including leveraging the capabilities of the tools and techniques in SE to translate a client's needs into a working capability.



Apply expertise in the installation, deployment and configuration of the different platforms. You'll be keeping them in good shape, including conducting maintenance activities, monitoring the health of the platform, and conducting proactive monitoring of PKI/HSM. Support any break/fix, upgrades, patches, and performance or integration related issues. Maintain responsibility for scheduling periodic reports and addressing audit findings. Support critical Identity functions, including maintenance, patch identification and publication, and upgrades of any related modules. You'll collaborate with Architecture to conduct diverse proofs of concept to validate evolutions or solutions.

Key Responsibilities:

- Administer and maintain enterprise PKI components with a focus on Keyfactor EJBCA and Keyfactor Command or similar platforms.
- Design, configure, and manage certificate profiles, CA hierarchies, enrollment processes, and certificate lifecycle workflows.
- Ensure secure key generation, storage, and management leveraging HSMs.
- Conduct proactive monitoring, health checks, maintenance, upgrades, and patching of PKI systems.
- Troubleshoot certificate-related issues across servers, applications, and infrastructure components.
- Perform cryptographic operations and validation using tools like OpenSSL.




- Ensure PKI compliance with internal policies, security standards, and audit requirements.

Operational Responsibilities

- Develop and maintain automation scripts (Bash, Python, PowerShell) for operational efficiency.
- Provide L3 engineering support for PKI and related cryptographic services.
- Produce periodic operational reports and assist in the remediation of audit and compliance findings.
- Document technical procedures, architecture, and operational runbooks.

What qualifications will make you successful for this role?

- Bachelor’s degree in computer science, Engineering, or equivalent experience
- At least 3 years working in PKI engineering and certificate services, AWS Cloud, Microsoft's Identity and Access services like AD/AAD.
- Deep understanding of:
- X.509, RSA, certificate chains, key usage, CRL/OCSP
- Certificate lifecycle management and CA operations
- Strong experience with Linux and/or Windows (administration and troubleshooting).
- Strong scripting abilities in PowerShell, Bash, or Python.
- Practical experience implementing and troubleshooting HSMs.
- Experience with cryptographic tools such as OpenSSL.
- Ability to work directly with teams and vendors to resolve complex PKI or platform issues.
- Experience working in enterprise environments with strong security and compliance requirements.
- Extensive experience working with clients or architects to provide best practice recommendations and other related security requirements
- Proven ability to work closely with customer's network and operations team to resolve issues or security concerns of

📌 Lead, PKI Technical Engineer (Barcelona)
🏢 Schneider Electric
📍 Barcelona