Senior Software Engineer

CA, Sunnyvale·Posted 3d ago

aillmsaasreactkubernetesdockerawsgcpterraformkafkarag

<div class="content-intro">Who we are DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at <a href="http://www.digicert.com/">www.digicert.com</a></div>  Job summary The DigiCert Platform team is the foundation everything else runs on. We build and own the DigiCert One platform that powers every other DigiCert product — the shared infrastructure, services, and identity layer that product teams across DigiCert depend on to ship. Most critically, we own IAM for the entire DigiCert product portfolio: every login, every session, every access decision across DigiCert ONE flows through our team. This is high-leverage, high-stakes platform engineering. The systems you build won't serve one product — they'll serve all of them, at enterprise scale, with security requirements that leave no margin for error. We're looking for a Senior Software Engineer who combines deep Java and React expertise with production-grade IAM knowledge, and who treats AI as a genuine part of how they work — not a novelty. You'll own complex problems end-to-end, influence how the platform evolves, and raise the technical bar for the engineers around you. If you want your work to matter at scale, this is where to do it.   What you will do <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Lead the design and development of Java backend services and RESTful APIs — driving architectural decisions, defining API contracts, and setting the bar for code quality across the team</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Own complex full-stack features spanning Java backend services and React frontend, from requirements through production, including performance optimization and long-term maintainability</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Architect and implement IAM flows — OAuth 2.0, OIDC, and SAML — with deep, production-tested knowledge of token lifecycle, session management, multi-tenant identity, and integration with Okta, Azure AD, or equivalent identity providers</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Champion security engineering practices: secure-by-design architecture, threat modeling, RBAC/ABAC patterns, token security, and zero-trust principles applied in a platform context</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Drive CI/CD maturity — own and improve pipelines using Jenkins, GitHub Actions, or similar; define deployment strategies (blue/green, canary) and reliability standards across services</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Operate confidently with infrastructure: Docker, Kubernetes, and IaC tools (Terraform, Helm) at production scale, including cost-aware design and platform reliability</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Use AI coding agents fluently (GitHub Copilot, Cursor, Claude Code, etc.) as a native part of your daily workflow — and help the team do the same; bring judgment on where AI accelerates delivery and where human review is non-negotiable</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Integrate and ship AI/LLM capabilities into platform features: LLM API integration, prompt engineering, RAG patterns, and agentic workflows embedded into real product experiences</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Mentor and grow junior and mid-level engineers through code reviews, design feedback, pairing sessions, and technical guidance</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Own observability and incident response for the services you build — define SLOs, instrument with New Relic, Splunk, or Datadog, and lead post-mortems that improve the system</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Partner closely with Product and Design to shape requirements, push back on scope when needed, and consistently deliver value on time</li> </ul>   What you will have <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">+5 years of professional software engineering experience, with meaningful tenure in a platform or identity-adjacent domain</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Use AI coding agents (Cursor, GitHub Copilot, Claude, etc.) as a native part of your workflow — not occasionally, but daily and fluently</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Identify where AI can accelerate delivery and advocate for AI-first practices within the team</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Expert-level Java development: Spring Boot, RESTful API design, microservices patterns, performance tuning, and production reliability</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Strong React engineering: hooks, component architecture, state management (Redux or equivalent), and experience building complex, accessible UIs</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Deep, production-grade knowledge of OAuth 2.0, OIDC, and SAML — you've debugged token flows, handled edge cases in multi-tenant environments, and integrated with enterprise identity providers like Okta or Azure AD</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Strong security engineering fundamentals: threat modeling, RBAC/ABAC, secure token handling, input validation, and security-first design in a platform context</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Proficiency with CI/CD pipelines, Docker, Kubernetes, and IaC tools (Terraform or Helm); comfortable owning infrastructure, not just consuming it</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Solid command of relational databases (PostgreSQL or MySQL): schema design, query optimization, indexing strategy, and performance at scale</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Hands-on experience with cloud platforms (AWS, GCP, or Azure) and cloud-native design patterns</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Strong communication skills — able to drive alignment across engineering, product, and security stakeholders; comfortable presenting design decisions and tradeoffs</li> </ul>   Nice to have <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Experience with event-driven architectures — Kafka or similar — for real-time security event processing or audit pipelines</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Familiarity with digital certificates, PKI, or the broader DigiCert ONE trust platform</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Familiarity with agentic AI workflows — building tools that use LLMs, function calling, or autonomous pipelines</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Experience building or operating multi-tenant SaaS platforms with strict isolation requirements</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Track record of introducing AI-first development practices to a team — beyond personal use, raising the floor for others</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Contributions to open-source projects in identity, security, or platform infrastructure</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Experience with advanced deployment patterns (feature flags, progressive rollouts) and experimentation frameworks in a platform context</li> </ul>   Benefits <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Competitive compensation and comprehensive health, dental, and vision coverage </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Retirement savings programs with company matching (401(k) or RRSP) </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Generous paid time off, including holidays, and vacation </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Paid parental leave and family support benefits </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Life and disability coverage </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Flexible spending and health savings options (where applicable) </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Health and wellness support, including gym reimbursement and wellness programs </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Employee Assistance Program with 24/7confidential support for employees and families </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Education assistance and professional development opportunities </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Access to LinkedIn Learning and continuous learning resources </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Employee referral bonus program and additional company perks and discounts </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Internal rewards and recognition platform (Motivosity) to celebrate and acknowledge project wins, milestone achievements, and the outstanding contributions of our colleagues</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Business travel insurance and global employee support programs </li> </ul>   To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered. DigiCert is an Equal Opportunity employer and is committed to diversity in its workforce. In compliance with applicable federal and state laws, DigiCert prohibits discrimination on the basis of race or ethnicity, religion, color, national origin, sex, age, sexual orientation, gender identity/expression, veteran’s status, status as a qualified person with a disability, or genetic information. Individuals from historically underrepresented groups, such as minorities, women, qualified person with disabilities, and protected veterans are strongly encouraged to apply.   #LI-RR1<div class="content-pay-transparency"><div class="pay-input"><div class="description">Compensation Transparency:   The annualized base salary range for this position is outlined below.  Each candidate’s compensation offer will be determined based on factors including experience, skills, qualifications, job duties, business needs, and location. For roles that include additional compensation components, total compensation may include base pay, bonus, equity, or other incentives.  This role may also be eligible for benefits, which will be discussed during the hiring process. We are committed to fair and transparent pay practices and comply with all applicable pay transparency requirements. If you would like more information about compensation or benefits, we are happy to provide additional details during the hiring process.  For more information regarding our comprehensive benefits, see the benefits section. </div><div class="title">Base Salary</div><div class="pay-range">$170,000—$200,000 USD</div></div></div>

Apply for this role