Lead – PKI Technical Engineer

⚡We are your Energy Technology Partner. We electrify, automate, and digitalize every industry, business, and home, driving efficiency and sustainability for all.   

At Schneider Electric, our values – IMPACT (Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork) – are the foundation of everything we do. Becoming an Impact Maker means turning sustainability ambitions into actions at the intersection of automation, electrification, and digitization.   

Are you ready to lead the digital transformation to create a more sustainable world?🌳 

If you are up to challenge your creativity and make an impact, we are excited to welcome you! 

Schneider Digital is the digital department of Schneider Electric, leading the digital transformation in the company by giving support globally to our internal teams and our clients. Schneider Digital consists of 6 Digital Hubs worldwide which are strategically located to ensure a 24/7 support across the company (France, China, India, USA, Mexico and Spain). Our Digital Hub in Barcelona is formed by +450 employees working in strategic projects and different roles such as Data, Cybersecurity, ERP, Cloud, Infrastructures, IT Project Management or Digital Marketing. 

Schneider Electric has an exciting opportunity for a Tech Engineer with experience in Public Key Infrastructure (PKI) and Hardware Security Modules (HSMs).

The primary focus of this role is to operate, maintain, and evolve our enterprise PKI environment, ensuring secure certificate lifecycle management and robust key protection.

Work on a team as identity and access management engineer, including leveraging the capabilities of the tools and techniques in SE to translate a client's needs into a working capability. Apply expertise in the installation, deployment and configuration of the different platforms. You'll be keeping them in good shape, including conducting maintenance activities, monitoring the health of the platform, and conducting proactive monitoring of PKI/HSM. Support any break/fix, upgrades, patches, and performance or integration related issues. Maintain responsibility for scheduling periodic reports and addressing audit findings. Support critical Identity functions, including maintenance, patch identification and publication, and upgrades of any related modules. You'll collaborate with Architecture to conduct diverse proofs of concept to validate evolutions or solutions.

Key Responsibilities:

Primary Scope: PKI Engineering

· Administer and maintain enterprise PKI components with a focus on Keyfactor EJBCA and Keyfactor Command or similar platforms.

· Design, configure, and manage certificate profiles, CA hierarchies, enrollment processes, and certificate lifecycle workflows.

· Ensure secure key generation, storage, and management leveraging HSMs.

· Conduct proactive monitoring, health checks, maintenance, upgrades, and patching of PKI systems.

· Troubleshoot certificate-related issues across servers, applications, and infrastructure components.

· Perform cryptographic operations and validation using tools like OpenSSL.

· Ensure PKI compliance with internal policies, security standards, and audit requirements.

Operational Responsibilities

· Develop and maintain automation scripts (Bash, Python, PowerShell) for operational efficiency.

· Provide L3 engineering support for PKI and related cryptographic services.

· Produce periodic operational reports and assist in the remediation of audit and compliance findings.

· Document technical procedures, architecture, and operational runbooks.

What qualifications will make you successful for this role? 

· Bachelor’s degree in computer science, Engineering, or equivalent experience

· At least 3 years working in PKI engineering and certificate services, AWS Cloud, Microsoft's Identity and Access services like AD/AAD.

· Deep understanding of:

o X.509, RSA, certificate chains, key usage, CRL/OCSP

o Certificate lifecycle management and CA operations

· Strong experience with Linux and/or Windows (administration and troubleshooting).

· Strong scripting abilities in PowerShell, Bash, or Python.

· Practical experience implementing and troubleshooting HSMs.

· Experience with cryptographic tools such as OpenSSL.

· Ability to work directly with teams and vendors to resolve complex PKI or platform issues.

· Experience working in enterprise environments with strong security and compliance requirements.

· Extensive experience working with clients or architects to provide best practice recommendations and other related security requirements

· Proven ability to work closely with customer's network and operations team to resolve issues or security concerns of tools/services.

· Proven ability to work with vendors in troubleshooting and resolving issues related to identified security tools

· Fluent in English; strong communication and documentation skills.

Preferred Qualifications

· Experience with Keyfactor EJBCA and Keyfactor Command (highly desirable).

· Knowledge of AWS, Microsoft Active Directory and Azure certificate integration mechanisms.

· Experience with CyberArk for secure credential or key management.

· Relevant certifications (Microsoft Identity, Azure, AWS, CyberArk, CISSP, Security+).

· Basic knowledge of networking and firewalls.

· Experience with cloud environments (Azure and AWS).

Personal Attributes

· Strong analytical and problem-solving capabilities.

· High attention to detail and a security-first mindset.

· Ability to prioritize tasks and collaborate effectively in cross-functional teams.

· Proactive, motivated, and committed to continuous improvement of PKI and security operations.

· Passion, drive, energy, and a positive attitude

Let us learn about you! Apply today.