10 hours ago
Base Salary
$179k - $263k/yr
Responsibilities
- Lead the architecture, design, implementation, and operation of secure, scalable authentication and identity services.
- Own significant technical initiatives from problem definition and design through implementation, launch, and ongoing operation.
- Build highly available APIs and distributed services for authentication, authorization, token issuance, federation, session management, and identity lifecycle workflows.
- Apply authentication and authorization standards to real-world product and platform requirements.
- Partner with Product Management, Security, Infrastructure, and application engineering teams to define requirements and deliver reliable solutions.
- Establish engineering practices for security, availability, observability, testing, and incident response.
- Investigate complex production issues, lead root-cause analysis, and drive durable improvements.
- Review designs and code, provide technical mentorship, and help grow the authentication engineering community.
- Communicate with technical and non-technical stakeholders and influence decisions across teams.
Requirements
- 12+ years of professional software engineering experience or equivalent practical experience.
- Experience designing, building, and operating production backend services and distributed systems.
- Programming experience in one or more modern languages such as Java, C#, Go, or TypeScript/Node.js.
- Experience building or integrating authentication and identity systems.
- Knowledge of OAuth 2.0/OAuth 2.1, OpenID Connect, SAML 2.0, JWTs, token validation, key management, and related authentication concepts.
- Experience applying secure-by-design practices, threat modeling, and defenses against common authentication vulnerabilities.
- Experience designing RESTful APIs and integrating with internal or external identity providers.
- Experience leading technical decisions and delivering outcomes across team boundaries.
- Preferred experience with large-scale, multi-region identity or security platforms; WebAuthn, FIDO2, passkeys, MFA, adaptive authentication, or risk-based access controls.
- Preferred experience with OAuth extensions, highly reliable services, MSF service decomposition, containers, orchestration, cloud platforms, infrastructure automation, observability, privacy, compliance, enterprise security, mentoring, and architecture influence.
Benefits
- Hybrid work designation requiring a minimum of two days per week in the office, with frequency potentially varying by team.
- Base salary range of $178,900.00-$262,825.00 is provided separately for Washington locations.
- Eligibility for a company bonus plan and Restricted Stock Units.
- Paid time off and region-based company holidays.
- Up to six months of paid parental leave.
- Health benefit options from the first day of employment, including plans with 100% employer-paid options.
- Retirement and pension programs with potential employer contributions.
- Learning and development support including coaching, online courses, and education reimbursements.
- Paid compassionate care leave.
- The position is not eligible for employment in Alaska, Hawaii, Maine, Mississippi, North Dakota, South Dakota, Vermont, West Virginia, or Wyoming.
About DocuSign
DocuSign builds e-signature, contract lifecycle management, and agreement workflow software used by businesses to prepare, sign, and manage contracts. It sells cloud-based subscriptions and APIs that integrate with systems like Salesforce, Microsoft, and Google to automate document workflows and compliance. Founded in 2003 and headquartered in San Francisco, DocuSign is a public company on NASDAQ with over 1.5 million customers in more than 180 countries.