PKI / HSM Engineer (m/w/d)

At Landis+Gyr, we don’t just manage energy — we lead the transformation toward a smarter and more sustainable energy future.

With a net revenue of USD 1.73 billion in FY 2024, and a presence in over 30 countries across five continents we empower utilities and consumers to optimize energy usage through advanced metering, grid-edge intelligence, and powerful data analytics. Our teams are shaping the digital energy era by developing innovative technologies that drive decarbonization, grid modernization, and real-time energy insights. Join us at Landis+Gyr, where we manage energy better!

This role is part of Landis+Gyr’s EMEA (Europe, Middle East & Africa) business, which is expected to become an independent company under new ownership by mid-2026, subject to customary regulatory approvals. Joining now means contributing to an exciting phase of transformation — helping shape the future organization while remaining connected to Landis+Gyr’s global values and standards throughout the transition.

Are you passionate about cryptography and secure infrastructures?

Join us as a PKI / HSM Engineer (m/w/d) and take ownership of designing, implementing, and operating cutting-edge cryptographic systems that power our products and manufacturing processes. In this role, you’ll ensure the integrity, confidentiality, and compliance of our cryptographic assets across R&D, manufacturing, and operational technology environments.

Your profile:

• 5+ years of experience with PKI infrastructure and HSM administration in product or manufacturing environments.

• Strong knowledge of code signing, secure boot, and firmware integrity protection.

• Hands-on experience with HSM platforms (Thales, Utimaco, Entrust, or similar).

• Familiarity with PKI systems and certificate lifecycle management (Keyfactor, ADCS, EJBCA).

• Solid understanding of cryptographic standards (X.509, PKCS#11/12, KMIP).

• Experience integrating HSMs into CI/CD and manufacturing systems.

• Excellent documentation skills and audit-ready mindset.

Preferred qualifications:

• Degree in Computer Science, Information Security, or related field.

• Experience with post-quantum cryptography assessments or migration planning.

• Background in embedded or industrial systems (IoT, smart metering, OT).

• Knowledge of compliance frameworks (IEC 62443, ISO 27001).

• Design, maintain, and operate product PKI systems for certificate management, device identity, firmware signing, and software code signing.

• Administer and manage Hardware Security Modules (HSMs) for secure key storage, signing, and provisioning.

• Define and enforce key lifecycle management policies (generation, rotation, backup, retirement).

• Integrate HSMs with CI/CD pipelines and manufacturing workflows for secure releases.

• Manage enterprise-level certificate management tools (e.g., Keyfactor, Thales, EJBCA).

• Collaborate with R&D and Manufacturing teams to design secure provisioning and traceability processes.

• Provide documentation and audit evidence for product certifications (e.g., IEC 62443).

• Stay ahead of cryptographic trends and evaluate post-quantum readiness strategies.

• You will work on mission-critical cryptographic infrastructure for innovative products.

• You will collaborate with cross-functional teams in R&D, Manufacturing, and OT.

• You will drive security maturity and compliance in a global technology environment.
  #LI-HB1

We value and encourage diversity in our team. This position is open to all qualified candidates regardless of gender, race, age, disability, sexual orientation, or background. We're committed to shaping a better future for everyone. #EnergizeYourCareer and join us on our journey towards a greener tomorrow.

Job Title: PKI / HSM Engineer (m/w/d)