Lead, Pki Technical Engineer

Experteer Overview In this role you will operate and advance the enterprise PKI environment, ensuring secure certificate lifecycle management and robust key protection.You will work within a cross-functional team to translate client needs into secure capabilities, perform installation and configuration, and monitor PKI/HSM health.You’ll handle break/fix, upgrades, patches, and audits while collaborating with Architecture on proofs-of-concept.This position is embedded in Schneider Digital, contributing to the company’s digital transformation and security-focused initiatives.Compensaciones / Beneficios* Administer and maintain enterprise PKI components (Keyfactor EJBCA, Keyfactor Command)* Design and manage certificate profiles, CA hierarchies, enrollment, and lifecycle workflows* Ensure secure key generation, storage, and HSM-based protection* Perform proactive monitoring, maintenance, upgrades, and patching of PKI systems* Troubleshoot certificate issues across servers, apps, and infrastructure* Execute cryptographic operations with OpenSSL* Ensure PKI compliance with internal policies and audit requirements* Develop automation scripts (Bash, Python, PowerShell) for operations* Provide L3 PKI engineering support and produce operational reports* Document procedures, architecture, and runbooks* Collaborate with Architecture on proofs of concept to validate evolutions or solutions* Support critical identity functions, including patching and upgrades of related modules* Coordinate with customers’ networks and operations teams to resolve issues or security concerns* Work with vendors to troubleshoot and resolve issues related to security toolsResponsabilidades* Bachelor’s degree in computer science, Engineering, or equivalent experience* ?3 years in PKI engineering and certificate services* Experience with AWS Cloud and Microsoft Identity services (AD/AAD)* Strong knowledge of X.509, RSA, certificate chains, and certificate lifecycle management* Linux and/or Windows administration and troubleshooting* Scripting in PowerShell, Bash, or Python* Hands-on with HSMs and cryptographic tools (OpenSSL)* Ability to work with teams and vendors to resolve complex PKI/platform issues* Experience in enterprise security/compliance environments* Proven collaboration with clients/architects to provide best-practice security guidance* Fluent in English with strong communication/documentation skillsRequisitos principales* hybrid work plan* flexible schedule* Wellwo wellbeing platform* medical service at workplace* share ownership program* Career Hub and learning platforms

• Bachelor’s degree in computer science, Engineering, or equivalent experience
• ?3 years in PKI engineering and certificate services
• Experience with AWS Cloud and Microsoft Identity services (AD/AAD)
• Strong knowledge of X.509, RSA, certificate chains, and certificate lifecycle management
• Linux and/or Windows administration and troubleshooting
• Scripting in PowerShell, Bash, or Python
• Hands-on with HSMs and cryptographic tools (OpenSSL)
• Ability to work with teams and vendors to resolve complex PKI/platform issues
• Experience in enterprise security/compliance environments
• Proven collaboration with clients/architects to provide best-practice security guidance
• Fluent in English with strong communication/documentation skills

• hybrid work plan
• flexible schedule
• Wellwo wellbeing platform
• medical service at workplace
• share ownership program
• Career Hub and learning platforms