Junior PKI Engineer

About the role

Join the Certificate Management team at BASF Digital Hub Madrid and help deliver global IT services in an agile environment. You will work on public key infrastructure, key management and automation to support secure digital operations.

Key responsibilities

• Configure and operate Windows‑ and Linux‑based certificate lifecycle solutions (PKI).
• Create and customize processes for certificate lifecycle management.
• Configure and operate key management systems and hardware security modules.
• Automate and standardise use cases related to PKI and key management.
• Handle troubleshooting, ticket resolution and change management activities.

Required profile

• Completed Bachelor’s degree or comparable qualification in IT, Cyber Security, Computer Science or Mathematics.
• Strong analytical thinking, problem‑solving abilities and an agile, growth‑mindset.
• Proficiency in English.
• Relevant experience in PKI/CA, cryptography, IAM or digitalisation is a plus.

Required skills

• Public Key Infrastructure (PKI) concepts and tools.
• Windows and Linux operating systems.
• Azure DevOps scripting.
• PowerShell scripting.
• Repository management with GitHub.
• Knowledge of Thales Safenet HSMs or Nexus PKI.
• Key Management Systems and Hardware Security Modules.
• TLS certificate provisioning via cloud services.

What we offer

• Secure work environment with health, safety and wellbeing priority.
• Flexible work schedule and hybrid home‑office options.
• Learning and development opportunities.
• 25 vacation days plus 5 additional readjustment days.
• Collaborative, innovative international team.
• Relocation assistance to Madrid.