DigiCert
Who we are DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com Job summary We are building the trust layer for the agentic future. As AI agents move from simple chatbots to autonomous workloads with access to sensitive enterprise data, the industry lacks a standard for Identity, Authentication, and Governance. This role focuses on the runtime software that protects and governs how AI-agent systems communicate in production. You will work close to application traffic, secure service communication, policy enforcement, and runtime integrations across cloud-native and external environments. The work sits at the intersection of networking, security, and distributed systems. It is a strong fit for someone with deep Go and networking experience who wants to build the software that makes AI-agent execution safer, more controllable, and more production-ready. What you will do Build runtime software that handles secure communication, traffic control, policy enforcement, and service protection for AI-agent systems. Work on network-facing components such as application proxies, traffic inspection layers, secure communication libraries, and runtime security services. Implement and improve HTTP, TLS, certificate handling, request inspection, authorization integration, and performance-sensitive runtime logic. Partner with identity and platform engineers to connect runtime systems with authentication, authorization, audit, and cloud deployment workflows. Improve runtime reliability, observability, performance, and operability in production environments. Help define how secure runtime controls should work for modern AI-agent systems across internal and external execution environments. Support production incidents and continuously improve the safety and supportability of runtime systems. What you will have 8+ years of software engineering experience. Strong hands-on experience in Go. Additional fluency in Python, Rust, or C/C++ for systems-level work is a plus. Strong understanding of networking fundamentals: HTTP/1.1 and HTTP/2, TLS, certificates, proxies, load balancing, DNS, and service-to-service communication. Experience building network-facing or security-sensitive systems such as gateways, proxies, service mesh data planes, traffic filters, SDKs, or runtime security agents. Experience with Linux systems, containers, Kubernetes networking (CNI, iptables, eBPF), and cloud-native production environments. Good understanding of observability (metrics, tracing, structured logging), debugging, performance tuning, and production support. Experience with cloud security, API gateways, service mesh (Envoy, stio, Linkerd), or policy engines (OPA, Cedar) is a strong advantage.
Experience with SPIFFE/SPIRE Workload API, transparent proxy patterns (iptables, eBPF), async networking frameworks (aiohttp, asyncio, tokio), Envoy filter development, WebAssembly plugins, or protocol-level inspection (gRPC, WebSocket, MCP).
Generous time-off policies Top shelf benefits Education, wellness and lifestyle benefits To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered. #LI-RR1