Senior Software Engineer

<div class="content-intro"><p style="line-height: 1.4;"><span style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Who we are</strong></span></p> <p style="line-height: 1.4;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at&nbsp;<a href="[link in the portal] style="line-height: 1.4;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Job summary</strong></span></p> <p style="line-height: 1.4;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>This position is for the SSL Store, powered by DigiCert</strong></span></p> <p style="line-height: 1.4;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">We are hiring a Senior Software Engineer to build and run the platform behind our certificate management, TLS and vulnerability monitoring, uptime, and security products. The platform is a TypeScript monorepo: Fastify and Express services, Next.js and React frontends, MySQL and Redis, queues and workers on AWS, deployed to Kubernetes through Terraform, Helm, and Azure DevOps pipelines. It also carries a legacy .NET estate that we are steadily retiring, and a growing set of AI-assisted features and internal tooling.</span></p> <p style="line-height: 1.4;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">You will own features end to end, from schema and API through UI, pipeline, and production. We work in a small team with a lot of surface area, so the job rewards engineers who pick up whatever the problem needs, whether that is a new framework, a scanner's quirks, or a cloud primitive they have not touched before</span></p> <p style="line-height: 1.4;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>What you will do</strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Design, build, and ship features across the full stack: Fastify or Express APIs, Next.js and React frontends, MySQL schemas and migrations, SQS-driven workers, and the infrastructure that runs them.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Own services in production: observability with Sentry and Grafana, on-call participation, incident root-causing, and the follow-through fixes.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Build and evolve security and monitoring products that scan, probe, and score real customer infrastructure at scale, with correctness and performance budgets that matter.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Maintain and incrementally retire legacy .NET and Python components, moving behavior into the TypeScript platform with parity verified rather than assumed.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Extend CI/CD and infrastructure: Azure DevOps pipelines, Docker images, Helm charts, and Terraform for EKS, RDS, SQS, and related AWS services.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Integrate third-party and partner APIs (certificate authorities, scanners, identity providers) and keep those integrations resilient.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Use AI-assisted development tools as part of daily work, and build AI-backed features where they genuinely improve the product.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Review code, write tests, and raise the bar on standards that apply to human and AI-generated code alike.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Mentor other engineers and write up decisions so others can act on them without you in the room.</span></li> </ul> <p style="line-height: 1.4;">&nbsp;</p> <p style="line-height: 1.4;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>What you will have</strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">6+ years building and operating production web services and the frontends on top of them.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Strong TypeScript and Node.js, including a modern API framework (Fastify preferred, Express acceptable) and a React framework (Next.js preferred).</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Production experience in more than one language or ecosystem, and at least one stack change you drove or adapted to in the last few years. Depth in a single language is not enough for this role.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Solid relational database skills on MySQL or Postgres: schema design, migrations, indexing, query performance, and transaction and locking behavior.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Comfort owning what you ship: logging, metrics, alerting, and calm, evidence-led debugging in production.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Security awareness as a habit: authentication and authorization flows, secrets handling, input validation, and dependency hygiene.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Clear written communication. You can explain a design, a trade-off, or an incident to engineers and non-engineers.</span></li> </ul> <p style="line-height: 1.4;">&nbsp;</p> <p style="line-height: 1.4;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Nice to have</strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Hands-on AWS (compute, queues, storage, secrets) and the ability to read and change Terraform.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Containers and Kubernetes at a working level: writing a Dockerfile, reading a Helm chart, debugging a failing pod.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">CI/CD pipeline work in Azure DevOps or similar, plus Cloudflare or AWS WAF experience.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Grafana, Sentry, or equivalent observability tooling beyond basic dashboards.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Experience with PKI, TLS, or certificate lifecycle management, or with monitoring and scanning products (uptime, vulnerability, DNS or email security).</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">OAuth 2.0 and OpenID Connect implementation experience, especially multi-tenant identity providers.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">C# and .NET, enough to read, maintain, and migrate legacy services without making them your home.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Python for data pipelines, scanners, or tooling.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Large-scale scanning or crawling systems: fleets of workers, rate limits, timeouts, and the cost math behind them.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Building with LLM APIs, MCP servers, or agentic workflows in a product context.</span></li> </ul> <p style="line-height: 1.4;">&nbsp;</p> <p style="line-height: 1.4;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Benefits</strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span data-contrast="none">Competitive compensation and comprehensive health, dental, and vision coverage</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559737&quot;:0,&quot;335559738&quot;:60,&quot;335559739&quot;:60}">&nbsp;</span></span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span data-contrast="none">Retirement savings programs with company matching (401(k) or RRSP)</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559737&quot;:0,&quot;335559738&quot;:60,&quot;335559739&quot;:60}">&nbsp;</span></span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span data-contrast="none">Generous paid time off, including holidays, and vacation</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559737&quot;:0,&quot;335559738&quot;:60,&quot;335559739&quot;:60}">&nbsp;</span></span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span data-contrast="none">Paid parental leave and family support benefits</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559737&quot;:0,&quot;335559738&quot;:60,&quot;335559739&quot;:60}">&nbsp;</span></span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-f