Senior PKI Engineer

About the role

Join BASF Digital Hub Madrid as a Senior PKI Engineer and help secure the company's digital services. You will work within the Certificate Management team, supporting global IT services and driving automation of cryptographic processes.

Key responsibilities

• Configure and operate Windows‑ and Linux‑based certificate lifecycle solutions (PKI).
• Create and customize processes for certificate lifecycle management.
• Configure and operate key management systems and hardware security modules (HSM).
• Automate and standardize use cases across the PKI ecosystem.
• Handle troubleshooting, ticket resolution, and change management activities.

Required profile

• Master’s degree or equivalent in IT, Cyber Security, Computer Science, Mathematics or related field.
• At least 5 years of experience with PKI/CA environments and cryptography.
• Proficiency in PowerShell scripting, GitHub repository management, and general scripting (Azure DevOps).
• Strong analytical and problem‑solving abilities, agile mindset, and English proficiency.
• Nice to have: experience with Thales SafeNet HSMs or Nexus PKI.

Required skills

• PowerShell
• GitHub
• Azure DevOps
• Windows and Linux operating systems
• Public Key Infrastructure (PKI)
• Hardware Security Modules (HSM)
• Key Management Systems (KMS)

What we offer

• Secure work environment with health and safety priority.
• Flexible work schedule and home‑office options.