Senior Backend Engineer - Security

Job summary

We are building the trust layer for the agentic future. As AI agents move from simple chatbots to autonomous workloads with access to sensitive enterprise data, the industry lacks a standard for Identity, Authentication, and Governance. You will build the core security infrastructure that defines how agents are identified and controlled. Our mission is to build a "Zero Trust" architecture for AI—ensuring that every action an agent takes is cryptographically verifiable, authorized, and safe. You will be instrumental in setting our technical culture, selecting our stack, and scaling a platform that will secure the next generation of enterprise AI.

What you will do

• As part of the engineering team, you’ll work alongside industry-leading cryptographers, AI/ML innovators, cloud infrastructure experts, and security engineers who are defining the future of secure digital interactions.
• Architect and build the Identity Foundation: Design and own a cryptographically secure identity system that serves as the "source of truth" for all AI workloads, ensuring every agent has a verifiable and tamper-proof digital passport.
• Build Runtime Enforcement: Develop high-performance systems to control agentic interactions in real-time. You will ensure that agents operate strictly within their authorized boundaries without introducing latency.
• Define Governance Logic: Create the engines that translate complex human policies into machine-executable rules, controlling how agents access tools, databases, and LLMs.
• Design for Resilience and Scale: Build "secure-by-default" infrastructure that can handle thousands of concurrent autonomous agents across multi-cloud environments, ensuring the system remains tamper-proof.
• Shape the Technical Culture: You will select our core stack, define our engineering standards, and help build the team.

What you will have

• Systems Mastery: Deep experience building mission-critical distributed systems. You are a master of systems-level languages (like Go or Rust) and you have built distributed high performance systems from ground up.
• Identity & Security Infrastructure: Hands-on experience with SPIFFE/SPIRE, PKI, and mTLS. You understand certificate lifecycle management, OIDC, and OAuth2 at a protocol level.
• Cloud-Native Networking: Expert-level knowledge of Kubernetes (K8s) You have worked extensively with Envoy Proxy, Service Meshes (Istio/Linkerd), and Open Policy Agent (OPA).
• Cloud & DevOps: Experience deploying and securing production workloads on AWS, GCP, or Azure. You are comfortable with Infrastructure as Code (Terraform)
• You have a "bias for shipping" and are comfortable building CI/CD pipelines and observability stacks (Prometheus/Grafana) from scratch.
• AI Experience (Desirable): Prior experience or a strong interest in working with AI Agents (LangGraph, CrewAI, AutoGen), LLM APIs (OpenAI, Anthropic), and the Model Context Protocol (MCP).

Benefits

• Competitive compensation and comprehensive health, dental, and vision coverage 
• Retirement savings programs with company matching (401(k) or RRSP) 
• Generous paid time off, including holidays, and vacation 
• Paid parental leave and family support benefits 
• Life and disability coverage 
• Flexible spending and health savings options (where applicable) 
• Health and wellness support, including gym reimbursement and wellness programs 
• Employee Assistance Program with 24/7confidential support for employees and families 
• Education assistance and professional development opportunities 
• Access to LinkedIn Learning and continuous learning resources 
• Employee referral bonus program and additional company perks and discounts 
• Internal rewards and recognition platform (Motivosity) to celebrate and acknowledge project wins, milestone achievements, and the outstanding contributions of our colleagues
• Business travel insurance and global employee support programs 

To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered.

DigiCert is an Equal Opportunity employer and is committed to diversity in its workforce. In compliance with applicable federal and state laws, DigiCert prohibits discrimination on the basis of race or ethnicity, religion, color, national origin, sex, age, sexual orientation, gender identity/expression, veteran’s status, status as a qualified person with a disability, or genetic information. Individuals from historically underrepresented groups, such as minorities, women, qualified person with disabilities, and protected veterans are strongly encouraged to apply.

#LI-RR1

Salary range $150,000-$175,000 (actual salary offered to a candidate within this range will depend on a variety of factors including relative levels of experience and education, years in this or essentially similar role, market competition, etc.)