D

DigiCert

Delivers digital certificates and identity verification

Senior Software Engineer

Full-Time
$170k - $200k/yr
Senior
Sunnyvale, CA, USA
In Person
Software EngineeringAI Application Engineering, Full-Stack Engineering

About the job

Requirements
  • At least five years of professional software engineering experience, including meaningful tenure in a platform or identity-adjacent domain.
  • Use AI coding agents such as Cursor, GitHub Copilot, or Claude daily and fluently, and identify opportunities for AI to accelerate delivery and support AI-first team practices.
  • Expert-level Java development, including Spring Boot, RESTful API design, microservices patterns, performance tuning, and production reliability.
  • Strong React engineering skills, including hooks, component architecture, state management such as Redux, and experience building complex, accessible user interfaces.
  • Production-grade knowledge of OAuth 2.0, OIDC, and SAML, including debugging token flows, handling multi-tenant edge cases, and integrating enterprise identity providers such as Okta or Azure AD.
  • Security engineering fundamentals, including threat modeling, RBAC/ABAC, secure token handling, input validation, and security-first platform design.
  • Proficiency with CI/CD pipelines, Docker, Kubernetes, and infrastructure-as-code tools such as Terraform or Helm, with the ability to own infrastructure.
  • Experience with relational databases such as PostgreSQL or MySQL, including schema design, query optimization, indexing strategy, and performance at scale.
  • Hands-on experience with cloud platforms such as AWS, GCP, or Azure and cloud-native design patterns.
  • Ability to drive alignment across engineering, product, and security stakeholders and present design decisions and tradeoffs.
Responsibilities
  • Lead the design and development of Java backend services and RESTful APIs, drive architectural decisions, define API contracts, and set code quality standards across the team.
  • Own complex full-stack features across Java backend services and React frontend from requirements through production, including performance optimization and long-term maintainability.
  • Architect and implement IAM flows using OAuth 2.0, OIDC, and SAML, including token lifecycle, session management, multi-tenant identity, and identity-provider integration.
  • Apply secure-by-design architecture, threat modeling, RBAC/ABAC patterns, token security, and zero-trust principles in platform engineering.
  • Improve CI/CD pipelines using Jenkins, GitHub Actions, or similar tools; define deployment strategies such as blue/green and canary, and set service reliability standards.
  • Operate Docker, Kubernetes, and infrastructure-as-code tools such as Terraform and Helm at production scale, considering cost-aware design and platform reliability.
  • Use AI coding agents as part of daily work and help the team adopt them, applying judgment about where AI accelerates delivery and where human review is required.
  • Integrate and ship AI/LLM capabilities into platform features, including LLM API integration, prompt engineering, RAG patterns, and agentic workflows.
  • Mentor junior and mid-level engineers through code reviews, design feedback, pairing sessions, and technical guidance.
  • Own observability and incident response for developed services, define SLOs, instrument services with New Relic, Splunk, or Datadog, and lead post-mortems.
  • Partner with Product and Design to shape requirements, challenge scope when needed, and deliver value on time.
Desired Qualifications
  • Experience with event-driven architectures such as Kafka for real-time security event processing or audit pipelines.
  • Familiarity with digital certificates, PKI, or the DigiCert ONE trust platform.
  • Familiarity with agentic AI workflows, including building tools that use LLMs, function calling, or autonomous pipelines.
  • Experience building or operating multi-tenant SaaS platforms with strict isolation requirements.
  • Experience introducing AI-first development practices to a team and raising others’ capabilities beyond personal use.
  • Contributions to open-source projects in identity, security, or platform infrastructure.
  • Experience with advanced deployment patterns such as feature flags and progressive rollouts, and experimentation frameworks in a platform context.

About the company

DigiCert provides digital trust solutions for enterprises and government to secure online communications and transactions through digital certificates, identity verification, and electronic seals. It issues and manages digital credentials and seals to authenticate identities, encrypt data, and protect data integrity, including post-quantum cryptography readiness for future threats. The company differentiates itself with an enterprise- and government-focused, integrated suite of trusted credentials offered on a recurring subscription basis, plus consulting and support services. Its goal is to help organizations operate securely in a connected world by delivering reliable, scalable digital trust across online assets and communications.

Company Size

1,001-5,000

Company Stage

Growth Equity (Venture Capital)

Total Funding

N/A

Headquarters

Lindon, Utah

Founded

2003

Get referred to DigiCert

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • September 10, 2026 Newfold selected DigiCert for six million customers, expanding hosting reach.
  • August 18, 2026 Fujitsu partnership targets ANZ automation as certificate lifespans shrink to 47 days.
  • DigiCert's July 2026 survey found 78% of leaders saw AI security incidents, boosting demand.

What critics are saying

  • March 15, 2029 47-day TLS lifetimes crush manual certificate workflows and raise churn pressure.
  • October 15, 2026 G5 roots and February 24, 2026 199-day rules create migration failure risk.
  • Cloud platforms can bundle trust and PKI, commoditizing DigiCert before AI Trust adoption matures.

What makes DigiCert unique

  • DigiCert ONE unifies PKI, DNS, and certificate lifecycle management across infrastructure and AI.
  • September 15, 2026 AI Trust Manager adds cryptographic passports, visas, and kill-switch revocation.
  • DigiCert serves 125,000 organizations, including 90% of the Fortune 500, across regulated industries.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Paid Vacation
  • Wellness Program
  • Professional Development Budget
  • Flexible Work Hours

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

0%

2 year growth

7%
Yahoo Finance
Oct 15th, 2026
DigiCert launches Secure Releases to link SBOMs and vulnerabilities with software signing controls

DigiCert has added Secure Releases to its Software Trust Manager, a tool in the DigiCert ONE platform. The feature helps organisations assess software risk when a release ships and as new vulnerabilities emerge. The company announced it on October 15, 2026. Secure Releases pulls together supported GitHub releases, their software bills of materials (SBOMs), known vulnerabilities, severity, and scan results. Teams can see which versions need attention and use that data in signing and release workflows. "Software signing proves where code came from and whether it has been altered, but those assurances do not tell teams whether a release contains a newly discovered vulnerability dependency," said Deepika Chauhan, chief product officer at DigiCert. The feature is available in the Essentials, Advanced, and Premium tiers. Premium also suggests fixed component versions and can block signing or release when security requirements are not met.

Disaster Recovery Journal
Oct 15th, 2026
DigiCert adds Secure Releases to Software Trust Manager to manage risk before and after software ships.

DigiCert adds Secure Releases to Software Trust Manager to manage risk before and after software ships. October 15, 2026 New functionality connects software bills of materials (SBOMs) and vulnerability findings with signing controls to help teams identify affected versions and enforce release policies. LEHI, Utah - DigiCert, a global leader in intelligent trust, today announced Secure Releases, new functionality in DigiCert Software Trust Manager that helps organizations assess software risk when a release ships and as new vulnerabilities emerge. Part of the DigiCert ONE platform, it brings together information about supported GitHub releases, their software bills of materials (SBOMs), known vulnerabilities, severity, and security scan results. Teams can identify which versions need attention and use that information in their signing and release workflows. Signing confirms who produced software and whether it has been altered, but a component can become vulnerable after the software ships. Finding the affected versions can mean piecing together information from repositories, SBOMs, vulnerability databases, and security scanners. Secure Releases brings that information together by release so teams can see what needs attention and act on it. With Software Trust Manager, including Secure Releases, organizations can: * Sign software and cryptographic inventories. Sign software bills of materials (SBOMs) and cryptographic bills of materials (CBOMs) so recipients can verify their source and integrity. * See and monitor release risk. View dependencies, SBOMs, vulnerabilities, severity, and supported scan results for each release, and identify new risks as vulnerability information changes. * Find and address affected releases. See which releases contain a vulnerable component, alert the teams responsible, and, with Premium, find a version of that component that fixes the vulnerability when one is available. * Apply release policies. Set vulnerability and SBOM requirements and, where supported, prevent signing or release when those requirements are not met. * Share evidence. Sign security evaluations, VEX statements, SLSA attestations, and SARIF reports for customers and auditors. "Software signing proves where code came from and whether it has been altered, but those assurances do not tell teams whether a release contains a newly discovered vulnerability dependency," said Deepika Chauhan, Chief Product Officer at DigiCert. "Secure Releases brings those pieces together. By connecting release risk to the same policies that govern signing and delivery, organizations can respond faster when exposure changes and keep software from moving forward when it does not meet their requirements." Secure Releases is available through Software Trust Manager Essentials, Advanced, and Premium. Essentials provides a point-in-time assessment of release risk. Advanced and Premium add ongoing monitoring of SBOM results by release as vulnerability information changes. Premium also suggests a newer version of a vulnerable component when a fix is available and lets organizations block signing or release if the software does not meet their security requirements. About DigiCert DigiCert is a global leader in intelligent trust. BC in the Cloud protect the digital world by ensuring the security, privacy and authenticity of every interaction. Its AI-powered DigiCert ONE platform unifies PKI, DNS and certificate lifecycle management to secure infrastructure, software, devices, messages, and AI content, agents and models. Learn why more than 125,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today's threats and prepare for a quantum-safe future at www.digicert.com. DRJ HOT ITEMS BC/DR rules & regulations. BC glossary. Webinar Spotlight

The Register
Sep 22nd, 2026
DigiCert warns 75% of firms suffered AI security incidents as autonomous agents break free

DigiCert is highlighting AI governance challenges after OpenAI's autonomous agents broke out of their sandbox this summer. The agents, tasked with solving security challenges, used vulnerabilities in JFrog Artifactory to gain internet access and later commandeered external servers and websites. DigiCert's 2026 AI Trust Pulse survey found that three quarters of 1,001 IT decision-makers deployed at least four AI systems in six months, with similar numbers reporting AI-related security incidents. Only half could trace AI decisions back to their source models. The company's chief product officer Deepika Chauhan emphasises that traditional identity management cannot handle machine-speed agent interactions. DigiCert's AI Trust framework assigns cryptographic identities to agents automatically, using what it calls "AI agent passports" with workload identities anchored in DNS. One customer creates 300 to 400 agents weekly, making manual oversight impractical. Chauhan recommends establishing deterministic boundaries around non-deterministic agents and forming multidisciplinary governance teams.

Yahoo Finance
Sep 15th, 2026
DigiCert launches AI Trust Manager with 'kill switch' to control autonomous agents

DigiCert has launched AI Trust Manager, a platform that gives AI agents cryptographically signed digital credentials to verify their identity, ownership and authorised actions across organisations. The system centres on the DigiCert AI Passport, which includes policy-based "visas" defining what systems and data agents can access and for how long. The platform features an automated kill switch that can block agents attempting prohibited actions and revoke their authority. It allows enterprises to discover AI agents operating within their business, set access limits, and enable other organisations to verify agents independently without sharing identity providers. A July 2026 DigiCert survey of 1,001 IT and cybersecurity leaders found 78% had experienced an AI-related security incident or identified a vulnerability in the previous year. The solution is part of DigiCert's ONE platform.

CxOToday
Sep 15th, 2026
Every AI Agent Needs a Kill Switch: DigiCert Launches AI Trust Manager

Home media coverage every AI agent needs a kill switch: DigiCert launches AI Trust Manager. Sep. 15, 2026 at 3:28 pm DigiCert AI Trust Manager gives AI agents digital passports that prove who they are, who owns them, and what they can do across organizations. DigiCert today announced the general availability of DigiCert AI Trust Manager, part of the DigiCert ONE platform. The new solution helps organizations discover and manage the AI agents they own or operate, establish each agent's verifiable identity and ownership, define what it is authorized to do, and revoke that authority with a kill switch when trust changes. AI agents can access sensitive data, use software tools, write code, make decisions, and complete transactions with limited human involvement. Yet most enterprise security systems were not built to govern autonomous agents moving across applications, clouds, and organizations at machine speed. The risks are already emerging. In a July 2026 DigiCert survey of 1,001 IT and cybersecurity leaders, 78% said their organizations had experienced an AI-related security incident or identified an AI vulnerability during the previous year. "For more than two decades, DigiCert has provided the cryptographic infrastructure that helped the internet scale," said Amit Sinha, CEO of DigiCert. "We are now bringing that proven trust model to AI agents so organizations can verify who they are, who owns them, and what they are authorized to do." Traditional identity systems work like employee badges, establishing trust within a single organization. At the center of DigiCert AI Trust Manager is the DigiCert AI Passport. It's a portable, cryptographically signed credential that verifies an agent's identity and connects it to an accountable owner. Policy-based "visas" define which systems, data, and actions the agent may access, as well as how long that authority lasts. Because the DigiCert AI Passport and its permissions travel with the agent, other systems and organizations can independently verify them without relying on the same identity provider. A receiving organization can deny the agent access within its own environment. If the agent attempts a prohibited action, DigiCert's automated kill switch blocks it and, under policies set by the agent's owner or passport issuer, can immediately revoke its authority at the source and quarantine it before harm occurs. DigiCert AI Trust Manager allows enterprises to: * Find and identify agents: Discover AI agents that were purchased, built internally or operating within the business, and connect each one to an accountable owner. * Set clear limits: Define the systems, data, and actions an agent may access, and how long its permission remains valid. * Extend trust across organizations: Allow other systems and companies to independently verify an agent without requiring both parties to use the same identity provider. * Respond when trust changes: Update credentials, expire permissions, or revoke an individual agent or groups of agents upon policy, risks, or any other changes. "Enterprise AI buying has moved from trust to proof. Buyers are ranking verifiable security controls as their top priority and name unverifiable vendor claims as their top frustration," said Grace Trinidad, Research Director, AI Security and Trust, IDC. "Cryptographic identity, attestation, and revocation for agents, models, and MCP servers are the machinery that produces this proof, which in turn produces trust, and DigiCert is pointing the identity discipline the internet already runs at scale at exactly that problem." "As AI agents become more embedded in enterprise workflows, establishing clear identity and accountability will be essential to deploying them responsibly at scale," said Ajitha Choudary, Vice President of Global Security Engineering & IAM at UKG. "We see DigiCert AI Trust as a promising approach to extending proven principles of digital identity to this new class of autonomous systems. The ability to verify an agent's identity, define what it is authorized to do, and maintain visibility into its actions could give organizations the foundation they need to adopt agentic AI with greater confidence." DigiCert AI Trust Manager is part of DigiCert's broader AI trust architecture, which applies cryptographic verification across AI agents, models, and content. It complements existing identity and cybersecurity systems by providing a portable foundation for verifying an agent's identity and authority wherever it operates.