Who we are

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com

Job summary

The Technical Systems Manager will lead a team of DevOps engineers accountable for architecting, implementing, and operating large-scale distributed DNS infrastructure. This position requires a strong blend of hands-on expertise in distributed systems and infrastructure engineering, coupled with effective team leadership, operational discipline and cross-functional collaboration. The role is responsible for ensuring the reliability, scalability, automation, and security of our DNS services while supporting infrastructure platforms.

You will drive reliability engineering practices, infrastructure automation, and continuous improvement initiatives while ensuring our DNS services meet stringent SLA, security, and performance standards.

What you will do

Key Responsibilities:

Leadership & Team Management

- Lead, mentor, and develop a team of DevOps Engineers.

- Set technical direction and operational standards for infrastructure engineering.

- Drive a culture of automation, observability, accountability, and operational excellence.

- Conduct performance reviews, career development planning, and hiring initiatives.

- Manage team capacity planning, on-call rotations, and incident response readiness.

Infrastructure & Platform Engineering

- Oversee design and operation of globally distributed DNS infrastructure.

- Ensure high availability, low latency, and DDoS-resilient service delivery.

- Drive infrastructure-as-code adoption and automation across environments.

- Manage multi-region deployments across bare metal, cloud, and hybrid environments.

- Maintain hardened, compliant, and secure production environments.

Reliability & Operations

- Own service reliability metrics (SLOs, SLIs, SLAs, etc).

- Lead incident management processes and post-incident reviews.

- Improve monitoring, logging, and observability frameworks.

- Ensure operational readiness for scaling traffic growth and peak events.

Security & Compliance

- Enforce secure infrastructure practices aligned with industry standards (CIS, SOC 2, etc.).

- Collaborate with security teams on vulnerability management and patching strategies.

- Oversee DNS security controls including DNSSEC, DDoS mitigation, and access management.

- Ensure compliance with internal and external audit requirements.

Cross-Functional Collaboration

- Partner with Network Engineering, Product, Security, and Support teams.

- Participate in architectural reviews for new services and features.

- Provide infrastructure guidance for product roadmap initiatives.

- Communicate technical strategy and risk to executive stakeholders.

What you will have

Required Qualifications

- 7+ years in infrastructure, SRE, or DevOps roles.

- 3+ years managing technical engineering teams.

- Deep understanding of operations.

- Experience operating high-scale distributed systems in production environments.

- Strong Linux systems administration expertise.

- Experience with automation and configuration management tools (e.g., Terraform, Ansible, Puppet).

- Proficiency with CI/CD pipelines.

- Experience with virtualization platforms and orchestration.

- Experience implementing monitoring and observability platforms.

- Demonstrated experience managing on-call and incident response processes.

Preferred Qualifications

- Deep understanding of DNS architecture.

- Experience operating global Anycast DNS networks.

- Knowledge of DNSSEC, zone signing infrastructure, and key management.

- Experience with DDoS mitigation strategies and traffic engineering.

- Familiarity with BGP routing and edge network architectures.