Software Architect AI Security

DigiCert•Sunnyvale, CA

6h•$200,000 - $255,000

About The Position

DigiCert is a global leader in intelligent trust, helping organizations protect the digital interactions people rely on every day. From websites and cloud services to connected devices and critical systems, we make sure digital experiences are secure, private, and authentic. Our AI-powered DigiCert ONE platform brings together certificates, DNS, and lifecycle management to help organizations stay ahead of risk as technology and threats evolve. Trusted by more than 100,000 organizations—including 90% of the Fortune 500—DigiCert helps businesses operate with confidence today while preparing for what’s next, including a quantum-safe future. We are building the security and identity backbone for the autonomous agent era. We are looking for a Founding Architect to act as the technical anchor for our engineering effort. This is a high-impact, hands-on role for someone who can anticipate the security failures of the future, design security solutions, and then jump into the trenches to help build them. You will bridge the gap between AI orchestration and hardened security infrastructure, ensuring small "Special Forces" squad is building toward a unified, scalable vision. We need a visionary who can and break them down into shippable, testable engineering milestones today.

Requirements

Full-Stack Architectural Depth: 8+ years of experience in system design. You can navigate the entire stack, from Linux internals and Kubernetes networking to application-level AI orchestration.
Dual-Language Proficiency: Expert-level coding skills in Golang, Python, Node.js
AI Agent & Model Fluency: Practical experience with agentic frameworks (LangGraph, CrewAI, AutoGen) and managed AI services (AWS Bedrock, Azure AI Foundry, Google Vertex AI). You understand how LLMs "think" and where they are most vulnerable.
Cloud-Native Mastery: Deep experience with Kubernetes, Envoy Proxy, and cloud IAM models across AWS, Azure, and GCP. You understand how to build workloads that are portable and secure.
Security-First Engineering: A strong foundation in Zero Trust principles, PKI, and API Security. You don’t treat security as a checkbox; you treat it as the core feature.
Collaborative Spirit: You thrive in a flat team structure. You aren't looking for a title; you are looking to be the person who makes the "impossible" parts of the product work.

Responsibilities

System Synthesis: Envision and document the end-to-end architecture that allows AI agents to possess verifiable identities, move across multi-cloud environments, and execute tool calls securely.
Bridge AI & Security: Design the "Gateway" logic where AI-native protocols (like MCP) meet enterprise-grade security controls (like IAM, Zero Trust, and mTLS).
Technical Decomposition: Break down massive, ambiguous challenges (like "secure multi-cloud agent identity") into concrete, testable engineering tasks for the team.
Hands-on Implementation: Spend about 70% of your time in the IDE. You lead by code—tackling the most complex architectural bottlenecks and setting the standard for code quality and performance.
Scalability & Resilience Planning: Architect for the "Day 2" problems: multi-tenancy, high availability, and "fail-closed" security posture and ensure our early-stage prototypes can scale to enterprise-grade workloads.