> Markdown version of [/jobs/ext/4493968-lead-pki-technical-engineer](https://www.wearedevelopers.com/jobs/ext/4493968-lead-pki-technical-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead, PKI Technical Engineer - **Company:** Schneider Electric - **Location:** Barcelona, Spain (Remote available) - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Active Directory, Amazon Web Services, Automation of Tests, Microsoft Azure, Bash Shell, CompTIA Security+, Cyber Security, Linux, Identity and Access Management, Python (Programming Language), Key Management, OpenSSL, Public Key Infrastructure, X.509, Windows PowerShell, Azure Active Directory, RSA (Cryptosystem), Scripting, Cloud Platform System, Cyberark, Firewalls (Computer Science), Information Technology, Performance Monitor - **Published:** November 1, 2026 - **Apply:** https://www.adzuna.es/details/5948509937 ## About the Role * Bachelor's degree in computer science, Engineering, or equivalent experience * At least 3 years working in PKI engineering and certificate services, AWS Cloud, Microsoft's Identity and Access services like AD/AAD. * Deep understanding of: o X.509, RSA, certificate chains, key usage, CRL/OCSP o Certificate lifecycle management and CA operations * Strong experience with Linux and/or Windows (administration and troubleshooting). * Strong scripting abilities in PowerShell, Bash, or Python. * Practical experience implementing and troubleshooting HSMs. * Experience with cryptographic tools such as OpenSSL. * Ability to work directly with teams and vendors to resolve complex PKI or platform issues. * Experience working in enterprise environments with strong security and compliance requirements. * Extensive experience working with clients or architects to provide best practice recommendations and other related security requirements * Proven ability to work closely with customer's network and operations team to resolve issues or security concerns of tools/services. * Proven ability to work with vendors in troubleshooting and resolving issues related to identified security tools * Fluent in English; strong communication and documentation skills. Preferred Qualifications * Experience with Keyfactor EJBCA and Keyfactor Command (highly desirable). * Knowledge of AWS, Microsoft Active Directory and Azure certificate integration mechanisms. * Experience with CyberArk for secure credential or key management. * Relevant certifications (Microsoft Identity, Azure, AWS, CyberArk, CISSP, Security+). * Basic knowledge of networking and firewalls. * Experience with cloud environments (Azure and AWS). Personal Attributes * Strong analytical and problem-solving capabilities. * High attention to detail and a security-first mindset. * Ability to prioritize tasks and collaborate effectively in cross-functional teams. * Proactive, motivated, and committed to continuous improvement of PKI and security operations. * Passion, drive, energy, and a positive attitude ## Description The primary focus of this role is to operate, maintain, and evolve our enterprise PKI environment, ensuring secure certificate lifecycle management and robust key protection. Work on a team as identity and access management engineer, including leveraging the capabilities of the tools and techniques in SE to translate a client's needs into a working capability. Apply expertise in the installation, deployment and configuration of the different platforms. You'll be keeping them in good shape, including conducting maintenance activities, monitoring the health of the platform, and conducting proactive monitoring of PKI/HSM. Support any break/fix, upgrades, patches, and performance or integration related issues. Maintain responsibility for scheduling periodic reports and addressing audit findings. Support critical Identity functions, including maintenance, patch identification and publication, and upgrades of any related modules. You'll collaborate with Architecture to conduct diverse proofs of concept to validate evolutions or solutions. Key Responsibilities: Primary Scope: PKI Engineering * Administer and maintain enterprise PKI components with a focus on Keyfactor EJBCA and Keyfactor Command or similar platforms. * Design, configure, and manage certificate profiles, CA hierarchies, enrollment processes, and certificate lifecycle workflows. * Ensure secure key generation, storage, and management leveraging HSMs. * Conduct proactive monitoring, health checks, maintenance, upgrades, and patching of PKI systems. * Troubleshoot certificate-related issues across servers, applications, and infrastructure components. * Perform cryptographic operations and validation using tools like OpenSSL. * Ensure PKI compliance with internal policies, security standards, and audit requirements. Operational Responsibilities * Develop and maintain automation scripts (Bash, Python, PowerShell) for operational efficiency. * Provide L3 engineering support for PKI and related cryptographic services. * Produce periodic operational reports and assist in the remediation of audit and compliance findings. * Document technical procedures, architecture, and operational runbooks.