Systems and Tools Manager

Who we are

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com

Job summary

The Technical Systems Manager will lead a team of DevOps engineers accountable for architecting, implementing, and operating large-scale distributed DNS infrastructure. This position requires a strong blend of hands-on expertise in distributed systems and infrastructure engineering, coupled with effective team leadership, operational discipline and cross-functional collaboration. The role is responsible for ensuring the reliability, scalability, automation, and security of our DNS services while supporting infrastructure platforms.

You will drive reliability engineering practices, infrastructure automation, and continuous improvement initiatives while ensuring our DNS services meet stringent SLA, security, and performance standards.

What you will do

Key Responsibilities:

Leadership & Team Management

    - Lead, mentor, and develop a team of DevOps Engineers.

    - Set technical direction and operational standards for infrastructure engineering.

    - Drive a culture of automation, observability, accountability, and operational excellence.

    - Conduct performance reviews, career development planning, and hiring initiatives.

    - Manage team capacity planning, on-call rotations, and incident response readiness.

Infrastructure & Platform Engineering

    - Oversee design and operation of globally distributed DNS infrastructure.

    - Ensure high availability, low latency, and DDoS-resilient service delivery.

    - Drive infrastructure-as-code adoption and automation across environments.

    - Manage multi-region deployments across bare metal, cloud, and hybrid environments.

    - Maintain hardened, compliant, and secure production environments.

Reliability & Operations

    - Own service reliability metrics (SLOs, SLIs, SLAs, etc).

    - Lead incident management processes and post-incident reviews.

    - Improve monitoring, logging, and observability frameworks.

    - Ensure operational readiness for scaling traffic growth and peak events.

Security & Compliance

    - Enforce secure infrastructure practices aligned with industry standards (CIS, SOC 2, etc.).

    - Collaborate with security teams on vulnerability management and patching strategies.

    - Oversee DNS security controls including DNSSEC, DDoS mitigation, and access management.

    - Ensure compliance with internal and external audit requirements.

Cross-Functional Collaboration

    - Partner with Network Engineering, Product, Security, and Support teams.

    - Participate in architectural reviews for new services and features.

    - Provide infrastructure guidance for product roadmap initiatives.

    - Communicate technical strategy and risk to executive stakeholders.

What you will have

Required Qualifications

    - 7+ years in infrastructure, SRE, or DevOps roles.

    - 3+ years managing technical engineering teams.

    - Deep understanding of operations.

    - Experience operating high-scale distributed systems in production environments.

    - Strong Linux systems administration expertise.

    - Experience with automation and configuration management tools (e.g., Terraform, Ansible, Puppet).

    - Proficiency with CI/CD pipelines.

    - Experience with virtualization platforms and orchestration.

    - Experience implementing monitoring and observability platforms.

    - Demonstrated experience managing on-call and incident response processes.

Preferred Qualifications

    - Deep understanding of DNS architecture.

    - Experience operating global Anycast DNS networks.

    - Knowledge of DNSSEC, zone signing infrastructure, and key management.

    - Experience with DDoS mitigation strategies and traffic engineering.

    - Familiarity with BGP routing and edge network architectures.

    - Experience in highly regulated environments.

    - Background in performance optimization for high-query-per-second systems.

    - Experience with containerization and orchestration (e.g., Kubernetes).

Leadership Competencies

    - Strong technical credibility with the ability to go deep when required.

    - Data-driven decision-making mindset.

    - Ability to balance innovation with operational stability.

    - Clear and effective communication across technical and executive audiences.

    - Strong incident leadership under high-pressure scenarios.

Success Metrics

    - Achievement of defined uptime and latency SLO targets.

    - Reduction in operational toil and manual processes.

    - Improved MTTR and incident prevention metrics.

    - Successful scaling of DNS infrastructure to support business growth.

    - High team engagement, retention, and performance.

Benefits

• Competitive compensation and comprehensive health, dental, and vision coverage 
• Retirement savings programs with company matching (401(k) or RRSP) 
• Generous paid time off, including holidays, and vacation 
• Paid parental leave and family support benefits 
• Life and disability coverage 
• Flexible spending and health savings options (where applicable) 
• Health and wellness support, including gym reimbursement and wellness programs 
• Employee Assistance Program with 24/7confidential support for employees and families 
• Education assistance and professional development opportunities 
• Access to LinkedIn Learning and continuous learning resources 
• Employee referral bonus program and additional company perks and discounts 
• Internal rewards and recognition platform (Motivosity) to celebrate and acknowledge project wins, milestone achievements, and the outstanding contributions of our colleagues
• Business travel insurance and global employee support programs 

To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered.

DigiCert is an Equal Opportunity employer and is committed to diversity in its workforce. In compliance with applicable federal and state laws, DigiCert prohibits discrimination on the basis of race or ethnicity, religion, color, national origin, sex, age, sexual orientation, gender identity/expression, veteran’s status, status as a qualified person with a disability, or genetic information. Individuals from historically underrepresented groups, such as minorities, women, qualified person with disabilities, and protected veterans are strongly encouraged to apply.

Compensation Transparency:  

The annualized base salary range for this position is outlined below. 

Each candidate’s compensation offer will be determined based on factors including experience, skills, qualifications, job duties, business needs, and location. For roles that include additional compensation components, total compensation may include base pay, bonus, equity, or other incentives. 

This role may also be eligible for benefits, which will be discussed during the hiring process. We are committed to fair and transparent pay practices and comply with all applicable pay transparency requirements. If you would like more information about compensation or benefits, we are happy to provide additional details during the hiring process. 

For more information regarding our comprehensive benefits, see the benefits section. 

Base Salary

$150,000—$180,000 USD