Senior Backend Engineer - Security

Who we are DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at  www.digicert.com Job summary We are building the trust layer for the agentic future. As AI agents move from simple chatbots to autonomous workloads with access to sensitive enterprise data, the industry lacks a standard for Identity, Authentication, and Governance. You will build the core security infrastructure that defines how agents are identified and controlled. Our mission is to build a "Zero Trust" architecture for AI—ensuring that every action an agent takes is cryptographically verifiable, authorized, and safe. You will be instrumental in setting our technical culture, selecting our stack, and scaling a platform that will secure the next generation of enterprise AI. What you will do As part of the engineering team, you’ll work alongside industry-leading cryptographers, AI/ML innovators, cloud infrastructure experts, and security engineers who are defining the future of secure digital interactions. Architect and build the Identity Foundation: Design and own a cryptographically secure identity system that serves as the "source of truth" for all AI workloads, ensuring every agent has a verifiable and tamper-proof digital passport. Build Runtime Enforcement: Develop high-performance systems to control agentic interactions in real-time. You will ensure that agents operate strictly within their authorized boundaries without introducing latency. Define Governance Logic: Create the engines that translate complex human policies into machine-executable rules, controlling how agents access tools, databases, and LLMs. Design for Resilience and Scale: Build "secure-by-default" infrastructure that can handle thousands of concurrent autonomous agents across multi-cloud environments, ensuring the system remains tamper-proof. Shape the Technical Culture: You will select our core stack, define our engineering standards, and help build the team. What you will have Systems Mastery: Deep experience building mission-critical distributed systems. You are a master of systems-level languages (like Go or Rust) and you have built distributed high performance systems from ground up. Identity & Security Infrastructure: Hands-on experience with SPIFFE/SPIRE, PKI, and mTLS. You understand certificate lifecycle management, OIDC, and OAuth2 at a protocol level. Cloud-Native Networking: Expert-level knowledge of Kubernetes (K8s) You have worked extensively with Envoy Proxy, Service Meshes (Istio/Linkerd), and Open Policy Agent (OPA). Cloud & DevOps: Experience deploying and securing production workloads on AWS, GCP, or Azure. You are comfortable with Infrastructure as Code (Terraform) You have a "bias for shipping" and are comfortable building CI/CD pipelines and observability stacks (Prometheus/Grafana) from scratch. AI Experience (Desirable): Prior experience or a strong interest in working with AI Agents (LangGraph, CrewAI, AutoGen), LLM APIs (OpenAI, Anthropic), and the Model Context Protocol (MCP). Benefits Competitive compensation and comprehensive health, dental, and vision coverage   Retirement savings programs with company matching (401(k) or RRSP)   Generous paid time off, including holidays, and vacation   Paid parental leave and family support benefits   Life and disability   coverage   Flexible spending and health savings options (where applicable)   Health and wellness support, including gym reimbursement and wellness programs   Employee Assistance Program with  24/7 confidential support for employees and families   Education assistance and professional development opportunities   Access to LinkedIn Learning and continuous learning resources   Employee referral bonus program and additional company perks and discounts   Internal rewards and recognition platform ( Motivosity ) to celebrate and acknowledge project wins, milestone achievements, and the outstanding contributions of our colleagues Business travel insurance and global employee support programs   To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered. DigiCert is an Equal Opportunity employer and is committed to diversity in its workforce. In compliance with applicable federal and state laws, DigiCert prohibits discrimination on the basis of race or ethnicity, religion, color, national origin, sex, age, sexual orientation, gender identity/expression, veteran’s status, status as a qualified person with a disability, or genetic information. Individuals from historically underrepresented groups, such as minorities, women, qualified person with disabilities, and protected veterans are strongly encouraged to apply. #LI-RR1 Salary range $150,000-$175,000 (actual salary offered to a candidate within this range will depend on a variety of factors including relative levels of experience and education, years in this or essentially similar role, market competition, etc.) Compensation Transparency:    The annualized base salary range for this position is outlined below.   Each candidate’s compensation offer will be determined based on factors including experience, skills, qualifications, job duties, business needs, and location. For roles that include additional compensation components, total compensation may include base pay, bonus, equity, or other incentives.   This role may also be eligible for benef