Full-Time

Principal Software Engineer

Posted on 4/22/2026

DigiCert

DigiCert

1,001-5,000 employees

Delivers digital certificates and identity verification

No salary listed

Bengaluru, Karnataka, India

In Person

Category
Software Engineering
Required Skills
Kubernetes
Microsoft Azure
Agile
MySQL
NoSQL
Software Testing
Java
Gradle
Docker
AWS
Go
Maven
REST APIs
Spring
Google Cloud Platform
Hibernate
Requirements
  • Bachelor’s degree in Computer Science, Software Engineering, or a related field (or equivalent experience)
  • 8+ years in software development, with significant experience in backend technologies
  • Proficiency in Java and Go
  • Experience with application frameworks such as Spring/Spring Boot/Hibernate/JPA
  • Familiarity with Gradle, Maven, and Jooq is advantageous
  • Ability to develop, consume, and evolve RESTful APIs
  • Strong understanding of relational databases (e.g., MySQL, MariaDB) and NoSQL databases
  • Proficiency with Docker and Kubernetes for containerization and orchestration
  • Experience with cloud computing platforms such as Amazon Web Services, Microsoft Azure, or Google Cloud Platform
  • Familiarity with Agile development practices
  • Application of secure coding practices and methodologies
  • Commitment to unit testing and delivering high-quality code
Responsibilities
  • Architect and develop backend systems using Java and Go to ensure scalability and reliability
  • Collaborate with product managers, UX designers, and architects to align technical solutions with business requirements
  • Write clean, efficient, and maintainable code and conduct code reviews to uphold high standards
  • Troubleshoot, debug, and resolve complex technical issues to enhance system performance and reliability
  • Provide technical leadership and mentorship to engineering teams, fostering a culture of continuous improvement
  • Stay current with emerging technologies and industry trends to drive innovation within the team
Desired Qualifications
  • Nice to have knowledge of Public Key Infrastructure, Cryptography and Code Signing

DigiCert provides digital trust solutions for enterprises and government to secure online communications and transactions through digital certificates, identity verification, and electronic seals. It issues and manages digital credentials and seals to authenticate identities, encrypt data, and protect data integrity, including post-quantum cryptography readiness for future threats. The company differentiates itself with an enterprise- and government-focused, integrated suite of trusted credentials offered on a recurring subscription basis, plus consulting and support services. Its goal is to help organizations operate securely in a connected world by delivering reliable, scalable digital trust across online assets and communications.

Company Size

1,001-5,000

Company Stage

Growth Equity (Venture Capital)

Total Funding

N/A

Headquarters

Lindon, Utah

Founded

2003

Your Connections

People at DigiCert who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • MSP Program offers scalable SaaS hub amid 47-day certificate validity shifts.
  • Document Trust Manager unifies PKI-backed signing compliant with eIDAS2 and AATL.
  • CyberLion partnership expands TLS/SSL and PKI distribution in Israel market.

What critics are saying

  • April 2026 screensaver breach stole 60 EV certificates signing Zhong Stealer malware.
  • CrowdStrike gaps left second support system undetected for two weeks.
  • Mozilla and browsers impose EV program restrictions within 6-12 months.

What makes DigiCert unique

  • CertCentral automates PKI lifecycle management for Fortune 100 enterprises.
  • AI Trust framework secures agents, models, and content with cryptographic verification.
  • Content Trust Manager implements C2PA standard for AI-generated media authenticity.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Paid Vacation

Wellness Program

Professional Development Budget

Flexible Work Hours

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

1%

2 year growth

8%
Omise
Jun 12th, 2026
Tech update: upcoming TLS certificate migration to AWS ACM.

Tech update: upcoming TLS certificate migration to AWS ACM. June 12, 2026 At Omise, Omise Co., Ltd. is constantly working to optimize its infrastructure's security, reliability, and speed. As part of its ongoing infrastructure maintenance, Omise Co., Ltd. will be migrating its server SSL/TLS certificates from DigiCert to AWS Certificate Manager (ACM) on 1 March 2027. For most customers, no configuration changes will be required. However, customers using certificate pinning, custom trust stores, legacy environments, or TLS inspection controls should review their systems and verify compatibility before the migration. Here's how to validate your environment and identify any changes that may be required. Method 1: check your device or browser version. If your users access its services via standard web browsers or mobile apps, no action is typically required, provided your operating systems meet or exceed the baselines below: * Web Browsers: Google Chrome, Mozilla Firefox, Apple Safari, or Microsoft Edge (any version updated within the last 10 years). * Mobile Devices: iOS 5.0+ or Android 2.3.3+. * Operating Systems: Windows XP SP3 / 7 / 10 / 11, macOS 10.4+, Ubuntu 12.04+, RHEL 5+, or Debian 6.0+ Quick Reference: If your machine or browser has received a software update at any point since 2015, it inherently trusts the new AWS certificates. Method 2: test server-to-server connections via command line. If you operate a backend server that interacts with its APIs, you can check your server's root certificate store directly. Log into your server environment and run a connection check against its designated test endpoint: Using cURL: Bash curl -I https://api-test.omise.co/ What to look for: If the command successfully returns an HTTP status code (such as 200 or 401), your server's environment is fully prepared. Using OpenSSL Bash openssl s_client -connect api-test.omise.co:443 -verify_return_error What to look for: Look for Verify return code: 0 (ok) to confirm that your system trusts the certificate and can connect successfully. Method 3: test via a Quick script (for developers). If your platform integrates with Omise Co., Ltd. via code, your developers can verify compatibility by running a simple test script in any programming language against its test environment. Python Example: Python import requests try: response = requests.get('https://api-test.omise.co/') print("Verification Successful! Status code:", response.status_code) except requests.exceptions.SSLError as e: print("Verification Failed (SSL Error):", e) Node.js Example: JavaScript const https = require('https'); https.get('https://api-test.omise.co/', (res) => {console.log('Verification Successful! Status code:', res.statusCode);}).on('error', (e) => {console.error('Verification Failed (SSL Error):', e.message);}); Java Example: While Java versions 7u75+, 8u25+, and all iterations of Java 9+ typically include native support for AWS ACM, specific applications may rely on unique, isolated certificate trust stores (cacerts). To confirm that your specific JVM environment recognizes the new endpoint, Omise Co., Ltd. recommend executing a brief code snippet as a verification step. import java.io.IOException; import java.net.HttpURLConnection; import java.net.URL; public class CertificateTest {public static void main(String args) { String testUrl = "https://api-test.omise.co/"; try { URL url = new URL(testUrl); HttpURLConnection connection = (HttpURLConnection) url.openConnection; connection.setRequestMethod("GET"); // Trigger the SSL handshake by getting the response code int responseCode = connection.getResponseCode; System.out.println("Verification Successful! HTTP Status Code: " + responseCode);} catch (javax.net.ssl.SSLHandshakeException e) {System.err.println("Verification Failed (SSL Error): Your Java environment does not trust the AWS ACM Root CA."); e.printStackTrace;} catch (IOException e) {System.err.println("Connection Failed (Network Error): " + e.getMessage;}}} What if a test fails? In the rare event that a legacy backend server or custom enterprise firewall fails the connection check to https://api-test.omise.co/, it indicates that your system's root store is missing the Amazon Trust Services certificates. To resolve this, your network administrator will need to download Amazon Root CA 1 from the official Amazon Trust Services Repository and import it into your environment's local trusted root store. Verify your systems before 1 March 2027. The cutover to the new AWS ACM certificates is scheduled for 1 March 2027. If you run into any unexpected errors during your validation tests, please contact its engineering support team at [email protected] for assistance.

CyberLion Ltd.
Mar 31st, 2026
CyberLion Ltd. appointed as DigiCert distributor in Israel, expanding digital trust capabilities across the market.

CyberLion Ltd. appointed as DigiCert distributor in Israel, expanding digital trust capabilities across the market. CyberLion Ltd., a boutique cybersecurity software distributor serving Israel, Greece, and Cyprus, today announced its appointment as an official distributor of DigiCert, a global leader in digital trust solutions. This strategic partnership enables CyberLion to deliver DigiCert's comprehensive portfolio - including TLS/SSL certificates, PKI solutions, and certificate lifecycle management - to enterprises, government organizations, and high-tech companies across Israel. The collaboration strengthens CyberLion's mission to bring cutting-edge cybersecurity and digital trust technologies to the regional market through its network of system integrators, resellers, and managed service providers. "As organizations accelerate digital transformation, managing digital trust has become a critical business priority," said Mr. Arie Wolman, EVP at CyberLion Ltd. "DigiCert's platform allows enterprises to secure identities, devices, and communications at scale, while eliminating the operational risks associated with certificate outages and compliance gaps. We are proud to bring this capability to the Israeli market." DigiCert is recognized globally for its leadership in PKI and certificate lifecycle automation, helping organizations reduce downtime, improve security posture, and meet regulatory requirements. Through CyberLion's distribution model, customers will benefit not only from DigiCert's technology but also from localized expertise, fast deployment support, and a highly responsive, partner-driven approach. CyberLion will focus on driving market adoption through a problem-led strategy, addressing key enterprise challenges such as certificate mismanagement, increasing compliance demands, and the growing complexity of digital ecosystems. The company will also work closely with its reseller and integrator partners to generate demand and deliver tailored solutions to end customers. This partnership marks a significant step in CyberLion's expansion strategy, reinforcing its position as a trusted cybersecurity distributor and enabling Israeli organizations to build a more secure and resilient digital infrastructure. About CyberLion Ltd. CyberLion Ltd. is a boutique cybersecurity software distributor operating in Israel, Greece, and Cyprus. The company specializes in bringing innovative and high-impact cybersecurity solutions to market, working closely with system integrators, resellers, and MSPs while maintaining a professional yet highly personal approach to service. About DigiCert DigiCert is a leading global provider of digital trust, enabling organizations to secure websites, enterprise access, communications, software, identity, content, and devices. Its solutions are trusted by enterprises worldwide to protect and manage digital interactions at scale.

Bluechip Infotech New Zealand
Mar 30th, 2026
DigiCert launches its new MSP Program.

DigiCert launches its new MSP Program. DigiCert has officially launched its new MSP Program. DigiCert has officially launched its new MSP Program, designed to equip Managed Service Providers (MSPs) with the tools and automation needed to support customers through the changes in digital certificate lifecycles. With certificate validity windows shrinking from one year to 47 days (with the first reduction already in effect at 200 days), scalable and automated certificate management is becoming critical. The DigiCert MSP offering goes beyond public certificate automation, enabling MSPs to modernize private PKI environments and prepare for the future of quantum-ready security. MSPs looking to expand their managed security portfolio and help clients stay ahead of these industry shifts can reach out to Bluechip IT for more information. Key features of the DigiCert MSP Hub: * * Centralised MSP Hub Platform: A high-performance regional SaaS platform featuring unlimited customer account creation for easy segmentation, co-management, and centralised inventory management. Includes free PKI internal and external certificate discovery to easily find rogue certificates. * Flexible Licensing: Simplified licensing that covers any User, Server, or Network Device PKI administration, allowing you to scale while managing everything in one place. * Branded Private PKI-as-a-Service: Build your own branded trust chain with private Root and Intermediate Certificate Authorities. Offer improved internal PKI administration, governance and automate policy management. * Premium 24x7x365 Support:Gain access to a dedicated global MSP support team, a personalised support portal for fast issue resolution, and priority escalation for critical partner needs. * Flex Seats for Internal Use: The program includes internal licenses so MSPs can easily discover and manage their own PKI environments, support multiple certificate vendors, and run POCs or evaluations. * Future-Proof Security: Consolidate and modernise your infrastructure while enabling smooth PQC (Post-Quantum Cryptography) migrations to protect against quantum computing threats Find out how the DigiCert MSP Hub can help you automate certificate management, modernise PKI, and prepare for shorter certificate lifecycles. For more information, reach out to Bluechip IT at [email protected] or call Bluechip IT at 09 306 0450.

SourceSecurity.com
Mar 26th, 2026
DigiCert enhances Document Trust Manager for AI era.

DigiCert enhances Document Trust Manager for AI era. 26 Mar 2026 Quick Read Summary is AI-generated, newsdesk-reviewed * DigiCert unveils Document Trust Manager to combat AI-driven document fraud and enhance security. * Centralised platform unifies signing workflows, increasing document integrity and compliance with global standards. * Secure signing with web, mobile verification supports PKI-backed signatures under eIDAS2 and AATL. DigiCert, a global authority on intelligent trust solutions, has announced significant upgrades to its Document Trust Manager, enhancing the ability of organisations to combat the increasing danger of document fraud. With the surge of generative AI and digital transformation, digital documents have become more vulnerable, necessitating more robust methods to ensure document integrity and comply with international standards such as AATL and eIDAS. Impact of generative AI on document security. The increase in generative AI has led to a dramatic rise in digital document vulnerabilities. Since 2019, the adoption of eSignatures has quadrupled as incidents of document-related fraud like phishing and identity misuse have sharply increased. Deepika Chauhan, DigiCert's Chief Product Officer, highlighted the urgency of this issue, stating, "AI is making document fraud faster, cheaper, and harder to detect. Organisations can't rely on visual trust anymore. They need cryptographic proof of who signed a document and that it hasn't been altered. That's what Document Trust Manager delivers at scale." Document Trust Manager enhancements. The updated Document Trust Manager integrates signing key management and workflows into a single, secure platform, addressing the fragmentation in different units and regulatory conditions. Key features include: * Unified Workflow & Centralised Visibility: Provides enterprise-wide monitoring of signing activities, allowing managers and auditors to track signatories and detect unauthorised signing activities. * Secure Certificate and Private Key Repository: Offers a centralised and protected storage solution for signing certificates and private keys, eliminating the need for physical USB tokens and enhancing security through Multi-Factor Authentication. * Pre-Integrated Signing: Facilitates seamless integration with platforms such as DocuSign and Adobe, allowing organisations to enhance security without altering existing signing processes. * Online Counter Signing: The DigiCert Secure Sign feature enables users to counter-sign with various orders during the signing process within the solution's ecosystem. Strengthening identity verification. Given the evolving requirements for digital identity and electronic signing in regulated markets, notably across EMEA, there is an increased focus on auditable and centralised signing controls. DigiCert Document Trust Manager addresses these needs by providing: * Verification of Signer Identity: Offers secure, remote authentication capabilities accessible via web and mobile platforms. * Compliance with Global Regulatory Standards: Supports PKI-backed signatures adhering to regulations such as eIDAS2, ZertES, and AATL. * Centralised Monitoring of Signing Activities: A single, unified solution for enterprise-level monitoring and control of all document signing activities. * Ensuring Document Integrity and Authenticity: Utilises PKI-backed digital signatures and robust identity verification methods, including biometric and ID-based proofing. * Enabling Secure and Compliant Workflows: Tailored solutions for remote and hybrid work environments to ensure security and compliance. According to Ozgun Pelit, Senior Analyst at Frost & Sullivan, "Enterprises are under pressure to demonstrate both compliance and authenticity. Centralised management of PKI-backed document signing provides stronger assurance than legacy, siloed approaches."

The Associated Press
Mar 17th, 2026
SSL Dragon launches DigiCert Mark Certificates to combat phishing attacks

SSL Dragon has launched DigiCert Mark Certificates to help businesses display verified brand logos in email inboxes and combat phishing attacks. The San Jose-based security provider now offers two certificate types: Verified Mark Certificates (VMC) starting at $1,049 annually, which require trademark registration and enable Gmail's blue checkmark, and Common Mark Certificates (CMC) from $799 annually, which require only 12 months of documented logo use. The certificates enable BIMI compliance, allowing authenticated logos to appear next to sender names in Gmail, Yahoo Mail and Apple Mail. With over 3.8 million phishing attacks recorded globally in 2025 and fewer than 5% of domains enforcing DMARC policies, the certificates aim to close the email trust gap. BIMI adoption currently sits below 6% of all domains globally.

INACTIVE