3 days ago
Base Salary
$179k - $263k/yr
Responsibilities
- Design and build enterprise cryptographic key management systems supporting generation, distribution, rotation, revocation, and expiry across cloud environments.
- Build and maintain tooling for the health, observability, and reliability of cryptographic services and key integrations.
- Establish and evolve data-at-rest and data-in-transit encryption standards across Docusign’s platform.
- Advise engineering teams on encryption patterns, key management constraints, and data isolation boundaries.
- Contribute to threat modeling and security design reviews to identify cryptographic and data protection risks.
- Develop high-quality, fully tested production code and conduct security- and availability-focused design and code reviews.
Requirements
- 12+ years of hands-on development experience in C# or other object-oriented languages.
- 12+ years of software engineering experience with high-scale distributed systems.
- Experience with AWS KMS, Azure Key Vault, GCP Cloud KMS, or equivalent, including key lifecycle management and cross-tenant or cross-account key access patterns.
- Experience with key wrapping, the DEK/KEK model, asymmetric key operations, encryption fundamentals, and cryptographic key lifecycle management.
- B.S. or M.S. in Computer Science or equivalent experience.
- Preferred experience with .NET microservice architecture and C# in high-scale production environments.
- Preferred hands-on experience with Azure Key Vault RBAC, Managed Identity integration, Encryption Scopes, and CMK-enabled data services.
- Preferred experience with Terraform, Bicep, or equivalent infrastructure-as-code tooling, per-tenant resource automation, and multi-region deployments.
- Preferred experience building monitoring and alerting for cryptographic services and highly available, reliable applications.
- Preferred experience with CI/CD pipelines and DevSecOps practices.
- Strong organizational, problem-solving, communication, and collaboration skills.
Benefits
- Hybrid work arrangement with a minimum expectation of two days per week in the office.
- Washington base salary range of $178,900.00–$262,825.00, plus eligibility for a company bonus plan and Restricted Stock Units.
- Paid time off and company holidays based on region.
- Up to six months of paid parental leave after birth, adoption, or foster placement.
- Health benefit plans, including options that are 100% employer-paid, beginning on the first day of employment.
- Retirement and pension plans with potential employer contributions.
- Learning and development options including coaching, online courses, and education reimbursement.
- Paid compassionate care leave.
About DocuSign
DocuSign builds e-signature, contract lifecycle management, and agreement workflow software used by businesses to prepare, sign, and manage contracts. It sells cloud-based subscriptions and APIs that integrate with systems like Salesforce, Microsoft, and Google to automate document workflows and compliance. Founded in 2003 and headquartered in San Francisco, DocuSign is a public company on NASDAQ with over 1.5 million customers in more than 180 countries.