Senior Software Engineer

DigiCert’s SSL Store is hiring a Senior Software Engineer to build and operate the platform behind certificate management, TLS and vulnerability monitoring, uptime, and security products. The role owns features end to end across APIs, frontends, databases, infrastructure, and production operations.

Responsibilities:

• Design, build, and ship features across the full stack: Fastify or Express APIs, Next.js and React frontends, MySQL schemas and migrations, SQS-driven workers, and the infrastructure that runs them
• Own services in production: observability with Sentry and Grafana, on-call participation, incident root-causing, and the follow-through fixes
• Build and evolve security and monitoring products that scan, probe, and score real customer infrastructure at scale, with correctness and performance budgets that matter
• Maintain and incrementally retire legacy .NET and Python components, moving behavior into the TypeScript platform with parity verified rather than assumed
• Extend CI/CD and infrastructure: Azure DevOps pipelines, Docker images, Helm charts, and Terraform for EKS, RDS, SQS, and related AWS services
• Integrate third-party and partner APIs (certificate authorities, scanners, identity providers) and keep those integrations resilient
• Use AI-assisted development tools as part of daily work, and build AI-backed features where they genuinely improve the product
• Review code, write tests, and raise the bar on standards that apply to human and AI-generated code alike
• Mentor other engineers and write up decisions so others can act on them without you in the room

Requirements:

• 6+ years building and operating production web services and the frontends on top of them
• Strong TypeScript and Node.js, including a modern API framework (Fastify preferred, Express acceptable) and a React framework (Next.js preferred)
• Production experience in more than one language or ecosystem, and at least one stack change you drove or adapted to in the last few years. Depth in a single language is not enough for this role
• Solid relational database skills on MySQL or Postgres: schema design, migrations, indexing, query performance, and transaction and locking behavior
• Comfort owning what you ship: logging, metrics, alerting, and calm, evidence-led debugging in production
• Security awareness as a habit: authentication and authorization flows, secrets handling, input validation, and dependency hygiene
• Clear written communication. You can explain a design, a trade-off, or an incident to engineers and non-engineers
• Hands-on AWS (compute, queues, storage, secrets) and the ability to read and change Terraform
• Containers and Kubernetes at a working level: writing a Dockerfile, reading a Helm chart, debugging a failing pod
• CI/CD pipeline work in Azure DevOps or similar, plus Cloudflare or AWS WAF experience
• Grafana, Sentry, or equivalent observability tooling beyond basic dashboards
• Experience with PKI, TLS, or certificate lifecycle management, or with monitoring and scanning products (uptime, vulnerability, DNS or email security)
• OAuth 2.0 and OpenID Connect implementation experience, especially multi-tenant identity providers
• C# and .NET, enough to read, maintain, and migrate legacy services without making them your home
• Python for data pipelines, scanners, or tooling
• Large-scale scanning or crawling systems: fleets of workers, rate limits, timeouts, and the cost math behind them
• Building with LLM APIs, MCP servers, or agentic workflows in a product context