PKI Compliance and Automation Engineer
Confirmed live in the last 24 hours
DigiCert
Job Description
Who we are
DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com
Job summary
Join our Certificate Authority Industry Standards team to learn and grow while contributing to compliance automation. You’ll assist in reading code for issuance microservices and certificate lifecycle pipelines. You’ll work closely with Product and Engineering teams to translate CA/Browser Forum requirements, Root Program policies, and CP/CPS controls into policy-as-code guardrails, pre-issuance validators, and automated evidence that make non-compliance impossible to ship. This role offers hands-on experience in PKI compliance engineering.
What you will do
- Code & Config Compliance Reviews (PKI-specific): Validate code against CA/B Forum BRs, EV Guidelines, S/MIME BRs, Root Program policies, RFC 5280, and CP/CPS.
- Support development of policy-as-code rules under guidance from senior engineers.
- Help integrate compliance checks into CI/CD pipelines.
- Participate in building automated evidence collection for audits.
- Implement validators and monitors for certificate lifecycle operations to ensure continuous compliance.
- Collaborate with team to improve developer experience and reduce false positives.
What you will have
- Bachelor’s degree in Computer Science, Software Engineering, Information Security, or equivalent practical experience.
- 2+ years of experience in software development, security, or compliance engineering.
- Ability to read and understand code (Python, Go, Java, or similar languages).
- pythonjavagorustawsgcpazurekubernetesaiios
