7 days ago
Base Salary
$158k - $233k/yr
Responsibilities
- Design and build enterprise-scale cryptographic key management systems across cloud environments.
- Implement key lifecycle capabilities including generation, distribution, rotation, revocation, and expiry.
- Build operational tooling for the health, observability, and reliability of cryptographic services and integrations.
- Drive encryption best practices and standards for data-at-rest and data-in-transit protection.
- Advise engineering teams on encryption patterns, key management constraints, and data isolation boundaries.
- Contribute to threat modeling and security design reviews for platform initiatives.
- Develop high-quality, fully tested production code and conduct security- and availability-focused design and code reviews.
Requirements
- 8+ years of hands-on development experience in C# or other object-oriented languages.
- 8+ years of software engineering experience with high-scale distributed systems.
- Experience with AWS KMS, Azure Key Vault, GCP Cloud KMS, or equivalent, including key rotation, revocation, expiry, and cross-tenant or cross-account access patterns.
- Knowledge of encryption fundamentals, including DEK/KEK key wrapping, asymmetric key operations, and cryptographic key lifecycle management.
- Bachelor’s or master’s degree in Computer Science or equivalent experience.
- Preferred experience with .NET microservices and C# in high-scale production environments.
- Preferred hands-on experience with Azure Key Vault RBAC, Managed Identity integration, Encryption Scopes, and CMK-enabled data services.
- Preferred experience provisioning cloud infrastructure at scale with Terraform, Bicep, or equivalent, including per-tenant automation and multi-region deployments.
- Preferred experience building monitoring and alerting for cryptographic services and highly available, reliable applications.
- Experience with CI/CD pipelines and DevSecOps practices is preferred.
Benefits
- Hybrid work arrangement requiring a minimum of two days per week in an office, with the specific frequency subject to team needs.
- Base salary range of $158,300.00–$232,575.00 in Washington, Maryland, New Jersey, and New York, including the NYC metro area.
- Eligibility for a company bonus plan and Restricted Stock Units.
- Paid time off and regional company holidays.
- Up to six months of paid parental leave after birth, adoption, or foster placement.
- Full health benefit options from the first day of employment, including employer-paid plans.
- Retirement and pension programs with potential employer contributions.
- Learning and development support including coaching, online courses, and education reimbursement.
- Paid compassionate care leave.
About DocuSign
Docusign brings agreements to life. Over 1.8 million customers and more than a billion people in over 180 countries use Docusign solutions to accelerate the process of doing business and simplify people’s lives. With intelligent agreement management, Docusign unleashes business critical data that is trapped inside of documents. Until now, these were disconnected from business systems of record, costing businesses time, money, and opportunity. Using Docusign IAM, companies can create, commit, and manage agreements with solutions created by the #1 company in e-signature and contract lifecycle management (CLM).