Senior Software Engineer

About the role

Who we are

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com

Job summary

The DigiCert Platform team is the foundation everything else runs on. We build and own the DigiCert One platform that powers every other DigiCert product — the shared infrastructure, services, and identity layer that product teams across DigiCert depend on to ship. Most critically, we own IAM for the entire DigiCert product portfolio: every login, every session, every access decision across DigiCert ONE flows through our team.

This is high-leverage, high-stakes platform engineering. The systems you build won't serve one product — they'll serve all of them, at enterprise scale, with security requirements that leave no margin for error.

We're looking for a Senior Software Engineer who combines deep Java and React expertise with production-grade IAM knowledge, and who treats AI as a genuine part of how they work — not a novelty. You'll own complex problems end-to-end, influence how the platform evolves, and raise the technical bar for the engineers around you. If you want your work to matter at scale, this is where to do it.

What you will do

- Lead the design and development of Java backend services and RESTful APIs — driving architectural decisions, defining API contracts, and setting the bar for code quality across the team

- Own complex full-stack features spanning Java backend services and React frontend, from requirements through production, including performance optimization and long-term maintainability

- Architect and implement IAM flows — OAuth 2.0, OIDC, and SAML — with deep, production-tested knowledge of token lifecycle, session management, multi-tenant identity, and integration with Okta, Azure AD, or equivalent identity providers

- Champion security engineering practices: secure-by-design architecture, threat modeling, RBAC/ABAC patterns, token security, and zero-trust principles applied in a platform context

- Drive CI/CD maturity — own and improve pipelines using Jenkins, GitHub Actions, or similar; define deployment strategies (blue/green, canary) and reliability standards across services

- Operate confidently with infrastructure: Docker, Kubernetes, and IaC tools (Terraform, Helm) at production scale, including cost-aware design and platform reliability

- Use AI coding agents fluently (GitHub Copilot, Cursor, Claude Code, etc.) as a native part of your daily workflow — and help the team do the same; bring judgment on where AI accelerates delivery and where human review is non-negotiable