Principal Software Engineer - AI

Bengaluru, India Senior Posted 2026-04-17

Don't apply into the void — reach the hiring manager

ResuMail finds the recruiters and hiring managers behind this Principal Software Engineer - AI role at DigiCert, drafts a personalised outreach email, and schedules the send — so your application actually gets seen.

Reach the hiring manager ›

About this role

<div class="content-intro">Who we are DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at <a href="http://www.digicert.com/">www.digicert.com</a></div>  Job summary We are building the trust layer for the agentic future. As AI agents move from simple chatbots to autonomous workloads with access to sensitive enterprise data, the industry lacks a standard for Identity, Authentication, and Governance. You will architect and build the core security and identity infrastructure that defines how AI agents are identified, authenticated, authorized, and governed at scale. You will set foundational architectural patterns, establish engineering standards, and help shape the long-term technical vision of the company. This is a hands-on technical leadership role in a high-ownership startup environment.   What you will do Architect the Trust Layer for AI <ul> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Design and implement distributed identity and authorization systems for autonomous AI agents.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Define Zero Trust principles for agent-to-agent and agent-to-system communication.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Architect cryptographic identity, verifiable credentials, and secure delegation models.</li> </ul> Build Cloud-Native, SaaS Infrastructure <ul> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Design and ship production-grade, multi-tenant SaaS services.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Build containerized microservices (Kubernetes-based) with strong observability, scalability, and resilience.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Establish secure service-to-service communication patterns using modern cloud-native best practices.</li> </ul> Develop Agent Security Testbeds <ul> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Build sophisticated multi-agent workflows to stress-test identity boundaries and governance models.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Create adversarial test harnesses to simulate prompt injection, privilege escalation, data exfiltration, and confused deputy attacks.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Ensure the platform is resilient against real-world enterprise attack scenarios.</li> </ul> Design Secure Developer SDKs <ul> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Create developer-facing SDKs and APIs that embed secure identity primitives into AI workloads.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Ensure clean abstractions and seamless integration into enterprise systems.</li> </ul> Secure Tooling & Protocol Architecture <ul> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Architect how agents interact securely with external systems via MCP or custom tool protocols.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Ensure every tool invocation is authenticated, authorized, and fully auditable.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Define policy enforcement layers for tool execution and resource access.</li> </ul> Technical Leadership <ul> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Own architectural direction and long-term technical roadmap.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Establish engineering standards for security, reliability, and performance.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Partner with infrastructure, product, and security teams to align on scalable execution.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Mentor engineers and raise the technical bar across the organization.</li> </ul>   What you will have Experience <ul> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">12+ years of professional software engineering experience.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Proven track record building and scaling cloud-native SaaS platforms.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Experience designing distributed systems that operate at enterprise scale.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Demonstrated ownership of zero-to-one or early-stage platform architecture.</li> </ul> Cloud & Infrastructure Expertise <ul> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Deep experience with Kubernetes, containerization, and microservices.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Strong background in AWS, Azure, or GCP (production environments).</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Experience building secure multi-tenant systems.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Familiarity with service meshes, API gateways, and identity federation (OIDC/OAuth2).</li> </ul> Security & Identity Architecture <ul> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Strong understanding of Zero Trust architectures.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Experience designing authentication, authorization (RBAC/ABAC), and policy-driven systems.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Familiarity with cryptographic primitives and secure token systems.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Understanding of common security threats in distributed systems.</li> </ul> AI / Agent Ecosystem Experience <ul> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Hands-on experience building or deploying LLM-based systems in production.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Familiarity with frameworks such as LangGraph, CrewAI, or AutoGen.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Experience deploying workloads on Azure AI Foundry, AWS Bedrock, or Vertex AI.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Understanding of prompt injection risks, model safety, and tool security boundaries.</li> </ul> Note: Deep agentic AI tenure is not required, but demonstrated production experience with LLM-powered systems is expected. Software Engineering Excellence <ul> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Expert-level Python (FastAPI, Pydantic, AsyncIO).</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Strong API design principles and SDK development experience.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Writes modular, production-grade code intended for reuse by other developers.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Strong testing discipline (unit, integration, adversarial testing).</li> </ul> Startup Mindset <ul> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Comfortable operating in ambiguity.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Experience owning architecture, implementation, and reliability simultaneously.</li> <li style="font-size: 12pt; font-family: arial, helvetica, sans-serif;">Bias toward shipping and iterative improvement.</li> </ul>   Benefits <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Generous time off policies</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Top shelf benefits</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Education, wellness and lifestyle support</li> </ul>     #LI-RR1

How to get this job at DigiCert

Don't rely on the portal. Cold applications for a role like Principal Software Engineer - AI land in a pile of hundreds. A direct, personalised message to the hiring manager or a referrer is the fastest way in.
Find the right person. ResuMail surfaces the actual recruiters and hiring managers at DigiCert — not a generic careers inbox.
Send tailored outreach. ResuMail drafts an email personalised to your resume and this role, then paces and schedules sends so you stay out of spam.
Follow up. One polite nudge after 5–7 days roughly doubles reply rates — scheduled for you.

Reach DigiCert's hiring managers today.

Free to start. No credit card. Built for Indian job seekers.

Start free with ResuMail ›