Software Engineer

Location: Seattle, Washington

Department: Engineering

Work Mode: Hybrid

About the Role

Docusign brings agreements to life. Over 1.5 million customers and more than a billion people in over 180 countries use Docusign's Intelligent Agreement Management platform to accelerate business processes with secure e-signatures and contract lifecycle management (CLM). We're seeking an experienced Software Engineer to join our Production Security Engineering team's growing Security Identity group. This individual contributor role, reporting to the Senior Manager, Cloud Identity Engineering, will play a pivotal role in building the multi-cloud foundation powering DocuSign's future. You'll design and implement a unified identity fabric across Azure, GCP, and on-premise Windows environments, enabling automated IAM for frictionless, secure access to our e-signature and CLM solutions while embedding compliance, vulnerability management, and security frameworks. Embracing Infrastructure-as-Code (IaC) and modern software engineering practices, you'll craft scalable, secure platforms that empower DocuSign's engineering teams to innovate rapidly. Key responsibilities include managing identity lifecycles (JML, JIT, PIM, PAM, RBAC), deploying Azure infrastructure like Virtual Networks and Load Balancers, securing hybrid Active Directory setups, and partnering cross-functionally to ensure auditable access and proactive vulnerability remediation. Your work will directly support DocuSign's strategic migration from on-premise to cloud, driving high availability and self-healing systems at global scale. This hybrid role requires a minimum of 2 days per week in-office, fostering our collaborative innovation culture where diverse perspectives thrive. Join a team committed to trust, equality, and making the world more agreeable through cutting-edge technology. With excellent problem-solving skills, cloud expertise, and a passion for secure, scalable identity solutions, you'll contribute to platforms that unleash business-critical data from agreements, helping customers save time, money, and opportunities.

Key Responsibilities

• Design, build, and operate services and systems managing the identity lifecycle (JML, JIT, PIM, PAM, RBAC) for DocuSign's intelligent agreement management platform
• Write Infrastructure-as-Code (Terraform, Ansible) and automation scripts (PowerShell, Python) to deploy secure identity and multi-cloud infrastructure on Azure and GCP
• Manage and secure hybrid Active Directory environments, including GPO configuration, replication, and RBAC to support e-signature workflows
• Deploy and manage core Azure infrastructure such as Virtual Networks, Load Balancers, Application Gateways, and highly available compute resources
• Partner cross-functionally with security, compliance, and engineering teams to implement controls, ensure auditable access, and advance DocuSign's security posture
• Perform proactive and reactive vulnerability remediations to protect DocuSign's e-signature and CLM solutions
• Provide technical guidance to team members, contribute to design reviews, and drive scalable solutions at enterprise scale
• Participate in on-call rotation to provide production support for mission-critical identity systems
• Develop automated, self-healing solutions and conduct Root Cause Analysis (RCA) for high availability
• Build unified identity fabric spanning Azure, GCP, and on-premise Windows environments to enable frictionless, secure access

Required Qualifications

• Bachelor's degree in Computer Science, Engineering, or related discipline
• 5+ years of experience performing System Engineering related responsibilities
• 3+ years of experience in advanced scripting and automation
• 3+ years of experience managing resources in a cloud-based server environment
• 3+ years of experience implementing and managing Infrastructure-as-Code (IaC) solutions
• Experience managing and securing hybrid Active Directory and Entra ID environments
• Strong software development experience in languages such as C#, .NET, Java, or Go

Preferred Qualifications

• Cloud Certifications (e.g., Azure AZ-104, GCP Associate Cloud Engineer) and/or Terraform Associate Certification
• Familiarity with identity protocols like Kerberos, SAML, OIDC, or OAuth
• Experience with containerization and orchestration technologies (Docker, Kubernetes)
• Knowledge of AWS services
• Experience with monitoring and telemetry software such as Grafana or Prometheus

Required Skills

• Advanced scripting and automation (PowerShell, Python)
• Infrastructure-as-Code (Terraform, Ansible)
• Cloud resource management (Azure, GCP)
• Hybrid Active Directory and Entra ID management
• Software development (C#, .NET, Java, Go)
• Identity protocols (Kerberos, SAML, OIDC, OAuth)
• Scalable systems design (load balancing, high availability, PKI)
• Containerization (Docker, Kubernetes)
• Monitoring and telemetry (Grafana, Prometheus)
• Vulnerability management and RCA
• Cross-functional collaboration
• Problem-solving and incident management
• Clear communication to technical and non-technical audiences
• Multi-cloud architecture experience
• Secure IAM practices (JML, JIT, PIM, PAM, RBAC)

Benefits

• Competitive base salary range: $133,800 - $197,750 (Washington, Maryland, New Jersey, New York)
• Company bonus plan based on performance
• Restricted Stock Units (RSUs) eligibility
• Paid Time Off and company holidays
• Paid Parental Leave up to six months
• Comprehensive health benefits with 100% employer-paid options from day one
• Retirement plans with employer contributions
• Learning and Development programs including coaching and education reimbursements
• Compassionate Care Leave for life-changing events

DocuSign is an Equal Opportunity Employer.