As a PKI Compliance and Automation Engineer, you'll validate code for compliance, implement automation in CI/CD pipelines, and assist in audits and policy translation.
Who we are
DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com
Job summary
Join our Certificate Authority Industry Standards team to learn and grow while contributing to compliance automation. You’ll assist in reading code for issuance microservices and certificate lifecycle pipelines. You’ll work closely with Product and Engineering teams to translate CA/Browser Forum requirements, Root Program policies, and CP/CPS controls into policy-as-code guardrails, pre-issuance validators, and automated evidence that make non-compliance impossible to ship. This role offers hands-on experience in PKI compliance engineering.
What you will do
- Code & Config Compliance Reviews (PKI-specific): Validate code against CA/B Forum BRs, EV Guidelines, S/MIME BRs, Root Program policies, RFC 5280, and CP/CPS.
- Support development of policy-as-code rules under guidance from senior engineers.
- Help integrate compliance checks into CI/CD pipelines.
- Participate in building automated evidence collection for audits.
- Implement validators and monitors for certificate lifecycle operations to ensure continuous compliance.
- Collaborate with team to improve developer experience and reduce false positives.
What you will have
- Bachelor’s degree in Computer Science, Software Engineering, Information Security, or equivalent practical experience.
- 2+ years of experience in software development, security, or compliance engineering.
- Ability to read and understand code (Python, Go, Java, or similar languages).
- Familiarity with PKI concepts (certificate lifecycle, Domain Control Verification methods) and eagerness to learn CA/Browser Forum standards.
- Exposure to CI/CD pipelines and willingness to learn compliance automation tools.
- Curiosity and willingness to learn PKI compliance engineering.
- Standards Translation: Turn industry policies into precise policy-as-code.
- Technical Analysis: Parse complex issuance code paths, DCV implementations, and profile renderers.
- Basic understanding of security principles and automation mindset to build reliable shift-left guardrails that block non-compliance pre-merge and pre-issuance.
- Attention to detail when reviewing code and configurations.
- Strong communication skills and ability to work in a team environment.
Nice to have
- Some experience with PKI tools such as zlint/cablint, OpenSSL/CFSSL, ASN.1 tooling, RFC 5280 path validation test suites.
- Hands-on experience is a plus but not required—mentorship will be provided.
- Kubernetes/cloud experience (OPA Gatekeeper/Kyverno, AWS/Azure/GCP).
- HSM operations (PKCS#11), FIPS 140-2/140-3 familiarity.
Benefits
- Generous time off policies
- Top shelf benefits
- Education, wellness and lifestyle support
#LI-KK1
Top Skills
AWS
Azure
Ci/Cd
GCP
Go
Java
Kubernetes
Openssl
Python
Similar Jobs
Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
Lead and execute process- and procedure-based internal audits for financial services clients, manage engagement timelines and teams, evaluate controls, interview client personnel, report findings, and identify improvement and cross-selling opportunities.
Top Skills:
CopilotExcelMicrosoft WordOutlook
Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
The Director of Quality Assurance leads a QA organization to ensure technology systems deliver flawless, secure experiences, establishing standards and strategies for testing and quality culture across the firm.
Top Skills:
AppiumAWSAzureCircleCICypressGCPGitlab CiJenkinsSelenium
Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
The Manager will lead advisory services for skilled nursing clients, focusing on financial reporting, budgeting, and operational improvements while mentoring staff.
Top Skills:
Bill.ComIntaactMicrosoft Office SuiteNetSuiteQuickbooks Online
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
