> Markdown version of [/jobs/ext/1983789-lead-pki-technical-engineer](https://www.wearedevelopers.com/jobs/ext/1983789-lead-pki-technical-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead, Pki Technical Engineer

- **Company:** Schneider Electric
- **Location:** Barcelona, Spain
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Automation of Tests, Bash Shell, Cloud Computing, Linux, Python (Programming Language), OpenSSL, Public Key Infrastructure, X.509, Windows PowerShell, Azure Active Directory, RSA (Cryptosystem), Scripting, Information Technology, Performance Monitor, Network Server
- **Published:** August 8, 2026
- **Apply:** https://www.buscojobs.com.es/lead-pki-technical-engineer-en-barcelona-ID-365971254

## About the Role

* Bachelor's degree in computer science, Engineering, or equivalent experience
 * ?3 years in PKI engineering and certificate services
 * Experience with AWS Cloud and Microsoft Identity services (AD/AAD)
 * Strong knowledge of X.509, RSA, certificate chains, and certificate lifecycle management
 * Linux and/or Windows administration and troubleshooting
 * Scripting in PowerShell, Bash, or Python
 * Hands-on with HSMs and cryptographic tools (OpenSSL)
 * Ability to work with teams and vendors to resolve complex PKI/platform issues
 * Experience in enterprise security/compliance environments
 * Proven collaboration with clients/architects to provide best-practice security guidance
 * Fluent in English with strong communication/documentation skills

## Description

Experteer Overview In this role you will operate and advance the enterprise PKI environment, ensuring secure certificate lifecycle management and robust key protection.You will work within a cross-functional team to translate client needs into secure capabilities, perform installation and configuration, and monitor PKI/HSM health.You'll handle break/fix, upgrades, patches, and audits while collaborating with Architecture on proofs-of-concept.This position is embedded in Schneider Digital, contributing to the company's digital transformation and security-focused initiatives.Compensaciones / Beneficios* Administer and maintain enterprise PKI components (Keyfactor EJBCA, Keyfactor Command)* Design and manage certificate profiles, CA hierarchies, enrollment, and lifecycle workflows* Ensure secure key generation, storage, and HSM-based protection* Perform proactive monitoring, maintenance, upgrades, and patching of PKI systems* Troubleshoot certificate issues across servers, apps, and infrastructure* Execute cryptographic operations with OpenSSL* Ensure PKI compliance with internal policies and audit requirements* Develop automation scripts (Bash, Python, PowerShell) for operations* Provide L3 PKI engineering support and produce operational reports* Document procedures, architecture, and runbooks* Collaborate with Architecture on proofs of concept to validate evolutions or solutions* Support critical identity functions, including patching and upgrades of related modules* Coordinate with customers' networks and operations teams to resolve issues or security concerns* Work with vendors to troubleshoot and resolve issues related to security toolsResponsabilidades* Bachelor's degree in computer science, Engineering, or equivalent experience* ?3 years in PKI engineering and certificate services* Experience with AWS Cloud and Microsoft Identity services (AD/AAD)* Strong knowledge of X.509, RSA, certificate chains, and certificate lifecycle management* Linux and/or Windows administration and troubleshooting* Scripting in PowerShell, Bash, or Python* Hands-on with HSMs and cryptographic tools (OpenSSL)* Ability to work with teams and vendors to resolve complex PKI/platform issues* Experience in enterprise security/compliance environments* Proven collaboration with clients/architects to provide best-practice security guidance* Fluent in English with strong communication/documentation skillsRequisitos principales* hybrid work plan* flexible schedule* Wellwo wellbeing platform* medical service at workplace* share ownership program* Career Hub and learning platforms


## Related Videos

- [Robots Run Wild, Massive Crime Data Leak and AI Replaces Models - David Benson](https://www.wearedevelopers.com/videos/1849-robots-run-wild-massive-crime-data-leak-and-ai-replaces-models-david-benson)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies)
- [Post-Quantum Cryptography: Preparing for Q-Day](https://www.wearedevelopers.com/videos/100179-post-quantum-cryptography-preparing-for-q-day)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)