PKI Engineer

Select how often (in days) to receive an alert:

At Landis+Gyr, we're helping shape the future of energy—making it more intelligent, resilient, and sustainable.

As a global energy technology leader, we're accelerating the energy evolution through purposeful innovation and trusted partnerships. Trusted by more than 2,000 utilities worldwide, our intelligent solutions connect devices, data, and decisions across the grid, helping customers modernize infrastructure, optimize operations, and deliver energy that is more reliable, resilient, accessible, safe, and sustainable.

Behind every solution is a team of approximately 3,300 employees across more than 40 countries who are passionate about solving complex challenges, driving innovation, and making a meaningful impact for our utility customers and the communities they serve.

The Security PKI Engineer exists to operate and support the companies symmetric and asymmetric encryption solutions and offerings. This person will have responsibility for the Global PKI Program, including enforcing global PKI policies and procedures, supporting a global PKI environment, and working with development and support teams to ensure PKI services are utilized appropriately and are available. This person is also responsible for supporting other key and secret services, including Cloud based key and secret policies, procedures, and solutions globally.

• Design, implement, administer, and support enterprise Public Key Infrastructure (PKI) solutions, including Microsoft AD CS, EJBCA, and cloud-based PKI services.
• Manage the complete certificate lifecycle, including certificate discovery, enrolment, issuance, renewal, revocation, replacement, validation, and reporting across internal, external, customer, manufacturing, and cloud environments.
• Support and maintain Certificate Lifecycle Management (CLM) platforms such as Keyfactor, Venafi, AppViewX, or equivalent solutions.
• Implement and maintain certificate automation using ACME, EST, SCEP, REST APIs, Power Shell, Python, and other automation frameworks.
• Manage public certificate services, including Domain Validation (DV), Organization Validation (OV), Extended Validation (EV), code-signing certificates, and public trust relationships.
• Perform certificate discovery and inventory assessments across servers, applications, cloud environments, load balancers, network devices, containers, and Dev Ops platforms.
• Troubleshoot and resolve complex PKI, certificate chain, TLS/SSL, code-signing, cryptographic, OCSP, CRL, and trust-store related issues.
• Develop and maintain PKI architecture standards, certificate policies, lifecycle processes, operational runbooks, and governance documentation.
• Collaborate with infrastructure, cloud, application, Dev Ops, IAM, and security teams to deploy and maintain secure cryptographic solutions.
• Support disaster recovery exercises, PKI operational readiness reviews, backup validation, key ceremonies, and business continuity requirements.
• Conduct cryptographic risk assessments and identify weak algorithms, unmanaged certificates, and non-compliant cryptographic implementations.
• Participate in PKI modernization initiatives, including CLM migrations, PKI platform upgrades, cloud PKI adoption, and post-quantum cryptography readiness activities.
• Participate in operational support and on-call rotations for critical PKI, certificate, and cryptographic service incidents.

Supports and adheres to Company’s core values.

Performs other duties or responsibilities as assigned or required.

Supports and adheres to Company’s Code of Conduct and Ethics Policy.

Represents Company in a positive, professional manner…