Who we are
DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com
Job summary
We are seeking a Senior Software Engineer with deep technical expertise in Java and GoLang, and a strong background in Cryptography, PKI, and Code Signing solutions. The ideal candidate will design and implement secure, scalable backend systems, drive innovation in code signing and software supply chain security products. You will work closely with cross-functional teams to deliver high-quality software that meets the needs of our customers.
What you will do
- Collaborate with product managers, UX designers and architects to understand project requirements and technical specifications.
- Design, develop, test, and maintain software applications, ensuring they meet high-quality standards and performance benchmarks.
- Write clean, efficient, and maintainable code, in accordance with coding standards and best practices.
- Conduct code reviews to increase code quality, consistency, and alignment with the product design and architecture.
- Analyze, troubleshoot, and debug product defects and provide timely solutions to customer issues.
- Stay up to date on emerging technologies and industry trends to continuously improve software development processes and tools.
- Contribute to architectural decisions and help drive technical innovation within the team.
What you will have
- Bachelor's degree in computer science, Software Engineering, or a related field (or equivalent experience).
- 5- 9 years of solid programming experience in Java.
- Build command-line tools and automation scripts for signing operations, certificate management, and integrate into DevSecOps pipelines.
- Solid grasp of relational databases (SQL), indexes, and query optimization techniques.
- Proficiency in software design patterns, data structures, and algorithms.
- Experience with distributed systems and microservices architectures.
- Experience with cloud infrastructure (AWS, GCP, Azure) and containerization (Docker, Kubernetes).
Nice to have
- Understanding of SSL/TLS, PKI, and other security-related technologies.
- Programming experience in Golang
- Experience in PKI, digital certificates, and code signing technologies
- Knowledge of PKCS#11, Java Cryptography Extension (JCE), and OpenSSL standards for cryptographic operations and integrations.
- Ability to design and implement secure code signing workflows and key management systems, leveraging Hardware Security Modules (HSMs), Key Management Systems (KMS), and secrets management tools.
- Understanding of cryptography, including encryption algorithms (ECDSA, RSA, ECC, and SHA256) and secure key lifecycle management.
- Exposure to Software supply chain security frameworks and standards (e.g., SLSA, NIST SSDF).
- Familiarity with secrets management, artifact signing (Sigstore, Cosign, in-toto), and build integrity practices.
- Familiarity with SBOM generation and verification processes.
- Exposure to AI and LLM models, their integration into developer workflows, and potential security risks.
Benefits
- Generous time off policies
- Top shelf benefits
- Education, wellness and lifestyle support
#LI-SS1
__PRESENT
