Systems and Tools Manager

US, Remote

Who we are

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com

Job summary

The Technical Systems Manager will lead a team of DevOps engineers accountable for architecting, implementing, and operating large-scale distributed DNS infrastructure. This position requires a strong blend of hands-on expertise in distributed systems and infrastructure engineering, coupled with effective team leadership, operational discipline and cross-functional collaboration. The role is responsible for ensuring the reliability, scalability, automation, and security of our DNS services while supporting infrastructure platforms.

You will drive reliability engineering practices, infrastructure automation, and continuous improvement initiatives while ensuring our DNS services meet stringent SLA, security, and performance standards.

 

What you will do

Key Responsibilities:

Leadership & Team Management
    - Lead, mentor, and develop a team of DevOps Engineers.
    - Set technical direction and operational standards for infrastructure engineering.
    - Drive a culture of automation, observability, accountability, and operational excellence.
    - Conduct performance reviews, career development planning, and hiring initiatives.
    - Manage team capacity planning, on-call rotations, and incident response readiness.

Infrastructure & Platform Engineering
    - Oversee design and operation of globally distributed DNS infrastructure.
    - Ensure high availability, low latency, and DDoS-resilient service delivery.
    - Drive infrastructure-as-code adoption and automation across environments.
    - Manage multi-region deployments across bare metal, cloud, and hybrid environments.
    - Maintain hardened, compliant, and secure production environments.

Reliability & Operations
    - Own service reliability metrics (SLOs, SLIs, SLAs, etc).
    - Lead incident management processes and post-incident reviews.
    - Improve monitoring, logging, and observability frameworks.
    - Ensure operational readiness for scaling traffic growth and peak events.

Security & Compliance
    - Enforce secure infrastructure practices aligned with industry standards (CIS, SOC 2, etc.).
    - Collaborate with security teams on vulnerability management and patching strategies.
    - Oversee DNS security controls including DNSSEC, DDoS mitigation, and access management.
    - Ensure compliance with internal and external audit requirements.

Cross-Functional Collaboration
    - Partner with Network Engineering, Product, Security, and Support teams.
    - Participate in architectural reviews for new services and features.
    - Provide infrastructure guidance for product roadmap initiatives.
    - Communicate technical strategy and risk to executive stakeholders.

 

What you will have

Required Qualifications
    - 7+ years in infrastructure, SRE, or DevOps roles.
    - 3+ years managing technical engineering teams.
    - Deep understanding of operations.
    - Experience operating high-scale distributed systems in production environments.
    - Strong Linux systems administration expertise.
    - Experience with automation and configuration management tools (e.g., Terraform, Ansible, Puppet).
    - Proficiency with CI/CD pipelines.
    - Experience with virtualization platforms and orchestration.
    - Experience implementing monitoring and observability platforms.
    - Demonstrated experience managing on-call and incident response processes.

Preferred Qualifications
    - Deep understanding of DNS architecture.
    - Experience operating global Anycast DNS networks.
    - Knowledge of DNSSEC, zone signing infrastructure, and key management.
    - Experience with DDoS mitigation strategies and traffic engineering.
    - Familiarity with BGP routing and edge network architectures.
    - Experience in highly regulated environments.
    - Background in performance optimization for high-query-per-second systems.
    - Experience with containerization and orchestration (e.g., Kubernetes).

Leadership Competencies
    - Strong technical credibility with the ability to go deep when required.
    - Data-driven decision-making mindset.
    - Ability to balance innovation with operational stability.
    - Clear and effective communication across technical and executive audiences.
    - Strong incident leadership under high-pressure scenarios.

Success Metrics
    - Achievement of defined uptime and latency SLO targets.
    - Reduction in operational toil and manual processes.
    - Improved MTTR and incident prevention metrics.
    - Successful scaling of DNS infrastructure to support business growth.
    - High team engagement, retention, and performance.

 

Benefits

  • Competitive compensation and comprehensive health, dental, and vision coverage 
  • Retirement savings programs with company matching (401(k) or RRSP) 
  • Generous paid time off, including holidays, and vacation 
  • Paid parental leave and family support benefits 
  • Life and disability coverage 
  • Flexible spending and health savings options (where applicable) 
  • Health and wellness support, including gym reimbursement and wellness programs 
  • Employee Assistance Program with 24/7confidential support for employees and families 
  • Education assistance and professional development opportunities 
  • Access to LinkedIn Learning and continuous learning resources 
  • Employee referral bonus program and additional company perks and discounts 
  • Internal rewards and recognition platform (Motivosity) to celebrate and acknowledge project wins, milestone achievements, and the outstanding contributions of our colleagues
  • Business travel insurance and global employee support programs 

To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered.

DigiCert is an Equal Opportunity employer and is committed to diversity in its workforce. In compliance with applicable federal and state laws, DigiCert prohibits discrimination on the basis of race or ethnicity, religion, color, national origin, sex, age, sexual orientation, gender identity/expression, veteran’s status, status as a qualified person with a disability, or genetic information. Individuals from historically underrepresented groups, such as minorities, women, qualified person with disabilities, and protected veterans are strongly encouraged to apply.

 

#LI-CH1

Compensation Transparency:  

The annualized base salary range for this position is outlined below. 

Each candidate’s compensation offer will be determined based on factors including experience, skills, qualifications, job duties, business needs, and location. For roles that include additional compensation components, total compensation may include base pay, bonus, equity, or other incentives. 

This role may also be eligible for benefits, which will be discussed during the hiring process. We are committed to fair and transparent pay practices and comply with all applicable pay transparency requirements. If you would like more information about compensation or benefits, we are happy to provide additional details during the hiring process. 

For more information regarding our comprehensive benefits, see the benefits section. 

Base Salary

$150,000 - $180,000 USD

Create a Job Alert

Interested in building your career at DigiCert? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Phone
Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf


Select...
Select...
Select...
Select...
Select...
Select...
Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in DigiCert’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...