Lead, PKI Technical Engineer

⚡We are your Energy Technology Partner. We electrify, automate, and digitalize every industry, business, and home, driving efficiency and sustainability for all. At Schneider Electric, our values – IMPACT (Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork) – are the foundation of everything we do. Becoming an Impact Maker means turning sustainability ambitions into actions at the intersection of automation, electrification, and digitization. Are you ready to lead the digital transformation to create a more sustainable world? If you are up to challenge your creativity and make an impact, we are excited to welcome you!

Schneider Digital is the digital department of Schneider Electric, leading the digital transformation in the company by giving support globally to our internal teams and our clients. Schneider Digital consists of 6 Digital Hubs worldwide which are strategically located to ensure a 24/7 support across the company (France, China, India, USA, Mexico and Spain). Our Digital Hub in Barcelona is formed by +450 employees working in strategic projects and different roles such as Data, Cybersecurity, ERP, Cloud, Infrastructures, IT Project Management or Digital Marketing.

Schneider Electric has an exciting opportunity for a Tech Engineer with experience in Public Key Infrastructure (PKI) and Hardware Security Modules (HSMs). The primary focus of this role is to operate, maintain, and evolve our enterprise PKI environment, ensuring secure certificate lifecycle management and robust key protection.

Work on a team as identity and access management engineer, including leveraging the capabilities of the tools and techniques in SE to translate a client's needs into a working capability. Apply expertise in the installation, deployment and configuration of the different platforms. You'll be keeping them in good shape, including conducting maintenance activities, monitoring the health of the platform, and conducting proactive monitoring of PKI/HSM. Support any break/fix, upgrades, patches, and performance or integration related issues. Maintain responsibility for scheduling periodic reports and addressing audit findings. Support critical Identity functions, including maintenance, patch identification and publication, and upgrades of any related modules. You'll collaborate with Architecture to conduct diverse proofs of concept to validate evolutions or solutions.

Key Responsibilities:

Primary Scope: PKI Engineering

• Administer and maintain enterprise PKI components with a focus on Keyfactor EJBCA and Keyfactor Command or similar platforms.

• Design, configure, and manage certificate profiles, CA hierarchies, enrollment processes, and certificate lifecycle workflows.

• Ensure secure key generation, storage, and management leveraging HSMs.

• Conduct proactive monitoring, health checks, maintenance, upgrades, and patching of PKI systems.

• Troubleshoot certificate-related issues across servers, applications, and infrastructure components.

• Perform cryptographic operations and validation using tools like OpenSSL.

• Ensure PKI compliance with internal policies, security standards, and audit requirements.

Operational Responsibilities

• Develop and maintain automation scripts (Bash, Python, PowerShell) for operational efficiency.

• Provide L3 engineering support for PKI and related cryptographic services.

• Produce periodic operational reports and assist in the remediation of audit and compliance findings.

• Document technical procedures, architecture, and operational runbooks.

What qualifications will make you successful for this role?

• Bachelor’s degree in computer science, Engineering, or equivalent experience

• At least 3 years working in PKI engineering and certificate services, AWS Cloud, Microsoft's Identity and Access services like AD/AAD.

• Deep understanding of:

  • X.509, RSA, certificate chains, key usage, CRL/OCSP
  • Certificate lifecycle management and CA operations

• Strong experience with Linux and/or Windows (administration and troubleshooting).

• Strong scripting abilities in PowerShell, Bash, or Python.

• Practical experience implementing and troubleshooting HSMs.

• Experience with cryptographic tools such as OpenSSL.

• Ability to work directly with teams and vendors to resolve complex PKI or platform issues.

• Experience working in enterprise environments with strong security and compliance requirements.

• Extensive experience working with clients or architects to provide best practice recommendations and other related security requirements

• Proven ability to work closely with customer's network and operations team to resolve issues or security concerns of tools/services.

• Proven ability to work with vendors in troubleshooting and resolving issues related to identified security tools

• Fluent in English; strong communication and documentation skills.

Preferred Qualifications

• Experience with Keyfactor EJBCA and Keyfactor Command (highly desirable).

• Knowledge of AWS, Microsoft Active Directory and Azure certificate integration mechanisms.

• Experience with CyberArk for secure credential or key management.

• Relevant certifications (Microsoft Identity, Azure, AWS, CyberArk, CISSP, Security+).

• Basic knowledge of networking and firewalls.

• Experience with cloud environments (Azure and AWS).

Personal Attributes

• Strong analytical and problem-solving capabilities.

• High attention to detail and a security-first mindset.

• Ability to prioritize tasks and collaborate effectively in cross-functional teams.

• Proactive, motivated, and committed to continuous improvement of PKI and security operations.

• Passion, drive, energy, and a positive attitude

What will you get? We adapt to you:

• With our flexible schedule, you'll have the freedom to adjust your work hours to accommodate your personal needs and responsibilities.

• We know how great it is to work from home. With our hybrid work plan, you can enjoy working from the comfort of your home.

• Need more time to relax and disconnect? With our Holy Pack, you can purchase additional vacation days to recharge when you need it most.

• Celebrate holidays your way! With Floating Holidays, you can exchange holidays for other days that better suit your plans and personal preferences.

• Need additional time to explore new experiences or focus on personal projects? With the Sabbatical Pack, you can request up to 2 months of extra leave (unpaid).

• We value the importance of family and want to support you in all aspects of your life. Our Global Family Leave Policy provides flexible paid conditions for when you need it most, whether you're about to be a parent, need time to overcome a loss, or to care for a loved one.

We take care of you:

• With access to the health and wellness platform Wellwo, you and up to 5 people of your choice can enjoy access to wellness content, nutrition counseling, fitness classes, and more!

• From dance classes to booking a hotel spa, we offer an agreement with Wellhub so you can access a network of thousands of gyms and sports centers to keep your body active in the way you like best.

• Your well-being is our priority. You will have medical service at your workplace for close attention to any medical needs.

We empower you:

• With Career Hub, our AI-driven professional development platform, you can connect with job opportunities, projects, and mentors at Schneider Electric globally.

• We offer you the opportunity to be a shareholder of Schneider Electric and share in our achievements with our stock ownership program.

• We celebrate everyone's talent and success with our recognition program, through which you can give and receive points for your achievements and redeem them for gift cards at your favorite stores.

• You will have life insurance for your protection.

• We offer you a Flexible Remuneration Plan in which you can choose from a variety of options, such as health insurance, meal vouchers, childcare vouchers, transportation vouchers, training, and more.

• With Club Schneider, you will enjoy special discounts at your favorite stores, restaurants, travel agencies, and other external services.

• Participate in company-subsidized volunteer programs to contribute to our community and have a positive impact on your environment.

Let us learn about you! Apply today.

At Schneider, we believe that every employee is a talent who deserves equal opportunities. This means you matter. Every individual needs to feel valued, supported, and treated fairly to do their best work. Our Total Rewards is our way of saying: “We see you. We value you”. It’s more than just pay and benefits- it’s a meaningful investment in you. It is designed for you to perform, grow, feel safe, and elevate your potential to shine as an impact maker.

Schneider Electric is there when it matters most to you

Our Total Rewards package outlines all the benefits and support you’ll enjoy as part of the Schneider Electric team:

Care for Yourself and Your Family. We ensure you feel secure with benefits that help you and your family thrive: health and life insurance, paid time off, parental and care leave, flexible work options, support for chronic conditions, and confidential counseling for life’s challenges.

Invest and Plan Your Future. We help you plan and invest for the future with competitive pay and programs: your base salary, short-term incentives or sales incentives, opportunities to own company shares, and retirement savings plans for your future.

Grow Your Skills and Career. We commit to helping you grow with ongoing performance and development conversations, Senior Talent Program, global career opportunities, access to our Schneider Career Hub for new positions, projects, and mentors, and learning platforms like Coursera to equip you with the skills for today and tomorrow.

Team Up in the Workplace. We encourage teaming up through project opportunities on the Schneider Career Hub, smart ways to collaborate, celebrating contributions via a recognition program, sharing your voice in our engagement survey, and fostering an inclusive, caring workplace.

Support Your Community. We make a difference in your community with volunteer leave, programs through the Schneider Electric Foundation, and initiatives that support youth education.

Looking to make an IMPACT with your career? When you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values – Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork – starts with us. IMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world. We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one. Become an IMPACT Maker with Schneider Electric – apply today!

• €40 billion global revenue

• +9% organic growth

• 150 000+ employees in 100+ countries

You must submit an online application to be considered for any position with us. This position will be posted until filled. Schneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and ‘inclusion’ is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do. At Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. You can find out more about our Trust Charter here

Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.