Senior Backend Engineer - Security at DigiCert

Sunnyvale, CAFull-timeProductPosted 2 months ago

About the Role

<div class="content-intro">Who we are DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at <a href="http://www.digicert.com/">www.digicert.com</a></div>  Job summary We are building the trust layer for the agentic future. As AI agents move from simple chatbots to autonomous workloads with access to sensitive enterprise data, the industry lacks a standard for Identity, Authentication, and Governance. You will build the core security infrastructure that defines how agents are identified and controlled. Our mission is to build a "Zero Trust" architecture for AI—ensuring that every action an agent takes is cryptographically verifiable, authorized, and safe. You will be instrumental in setting our technical culture, selecting our stack, and scaling a platform that will secure the next generation of enterprise AI.       What you will do <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">As part of the engineering team, you’ll work alongside industry-leading cryptographers, AI/ML innovators, cloud infrastructure experts, and security engineers who are defining the future of secure digital interactions.</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Architect and build the Identity Foundation: Design and own a cryptographically secure identity system that serves as the "source of truth" for all AI workloads, ensuring every agent has a verifiable and tamper-proof digital passport.</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Build Runtime Enforcement: Develop high-performance systems to control agentic interactions in real-time. You will ensure that agents operate strictly within their authorized boundaries without introducing latency.</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Define Governance Logic: Create the engines that translate complex human policies into machine-executable rules, controlling how agents access tools, databases, and LLMs.</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Design for Resilience and Scale: Build "secure-by-default" infrastructure that can handle thousands of concurrent autonomous agents across multi-cloud environments, ensuring the system remains tamper-proof.</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Shape the Technical Culture: You will select our core stack, define our engineering standards, and help build the team.</li> </ul>   What you will have <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Systems Mastery: Deep experience building mission-critical distributed systems. You are a master of systems-level languages (like Go or Rust) and you have built distributed high performance systems from ground up.</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Identity & Security Infrastructure: Hands-on experience with SPIFFE/SPIRE, PKI, and mTLS. You understand certificate lifecycle management, OIDC, and OAuth2 at a protocol level.</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Cloud-Native Networking: Expert-level knowledge of Kubernetes (K8s) You have worked extensively with Envoy Proxy, Service Meshes (Istio/Linkerd), and Open Policy Agent (OPA).</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Cloud & DevOps: Experience deploying and securing production workloads on AWS, GCP, or Azure. You are comfortable with Infrastructure as Code (Terraform)</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">You have a "bias for shipping" and are comfortable building CI/CD pipelines and observability stacks (Prometheus/Grafana) from scratch.</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">AI Experience (Desirable): Prior experience or a strong interest in working with AI Agents (LangGraph, CrewAI, AutoGen), LLM APIs (OpenAI, Anthropic), and the Model Context Protocol (MCP).</li> </ul>   Benefits <ul> <li>Competitive compensation and comprehensive health, dental, and vision coverage </li> <li>Retirement savings programs with company matching (401(k) or RRSP) </li> <li>Generous paid time off, including holidays, and vacation </li> <li>Paid parental leave and family support benefits </li> <li>Life and disability coverage </li> <li>Flexible spending and health savings options (where applicable) </li> <li>Health and wellness support, including gym reimbursement and wellness programs </li> <li>Employee Assistance Program with 24/7confidential support for employees and families </li> <li>Education assistance and professional development opportunities </li> <li>Access to LinkedIn Learning and continuous learning resources </li> <li>Employee referral bonus program and additional company perks and discounts </li> <li>Business travel insurance and global employee support programs </li> </ul> DigiCert is an Equal Opportunity employer and is committed to diversity in its workforce. In compliance with applicable federal and state laws, DigiCert prohibits discrimination on the basis of race or ethnicity, religion, color, national origin, sex, age, sexual orientation, gender identity/expression, veteran’s status, status as a qualified person with a disability, or genetic information. Individuals from historically underrepresented groups, such as minorities, women, qualified person with disabilities, and protected veterans are strongly encouraged to apply.     #LI-RR1   Salary range $150,000-$175,000 (actual salary offered to a candidate within this range will depend on a variety of factors including relative levels of experience and education, years in this or essentially similar role, market competition, etc.)  <div class="content-pay-transparency"><div class="pay-input"><div class="description">Compensation Transparency:   The annualized base salary range for this position is outlined below.  Each candidate’s compensation offer will be determined based on factors including experience, skills, qualifications, job duties, business needs, and location. For roles that include additional compensation components, total compensation may include base pay, bonus, equity, or other incentives.  This role may also be eligible for benefits, which will be discussed during the hiring process. We are committed to fair and transparent pay practices and comply with all applicable pay transparency requirements. If you would like more information about compensation or benefits, we are happy to provide additional details during the hiring process.  For more information regarding our comprehensive benefits, see the benefits section. </div><div class="title">Base Salary</div><div class="pay-range">$150,000—$175,000 USD</div></div></div>

About the Role

About the Role

Related Roles

About the Role

Related Roles