Lead Network Security Architect

Docusign, Inc.•San Francisco, CA

70d•Hybrid

About The Position

The Lead Network Security Architect defines and leads Docusign's Network Security Strategy, developing the standards, architecture patterns, and data-driven governance model that secures connectivity across the enterprise. This role bridges technical architecture, analytics, and oversight, ensuring the organization maintains a resilient, measurable, and continuously improving network security posture. Partnering closely with Enterprise, Product Technology and Security organizations, this leader ensures network design and operations are aligned with the company's Secure-by-Design / Secure-by-Default vision. Over time, this position may evolve to include management of a small team of network security and data analysts, enabling scalable, self-serve posture measurement and insight delivery. This position is an individual contributor role reporting to the Vice President, Security Assurance.

Requirements

12+ years of experience in network architecture, security architecture, or related roles in large-scale enterprise or cloud environments
Experience with network security technologies: firewalls/WAF, VPNs, SD-WAN, proxies, IDS/IPS, and routing protocols
Experience with cloud networking, segmentation, and hybrid connectivity models
Experience developing and governing enterprise network security standards and reference architectures
Experience with data modeling, dashboarding, or data visualization tools (e.g., Power BI, Tableau, or equivalent)
Experience with NIST CSF, CIS, and Zero Trust frameworks

Nice To Haves

Preferred certifications: CCIE Security, CCSP, CISSP, or equivalent experience
Experience mentoring or managing technical contributors
Exceptional communication, influence, and cross-functional collaboration skills

Responsibilities

Own Docusign's Network Security Strategy, defining the roadmap for network hardening, segmentation, and Zero Trust integration
Align strategy with enterprise objectives around customer trust, attack surface reduction, and data-driven decision-making
Evaluate new network security technologies (SASE, SSE, micro-segmentation, etc.) for enterprise adoption and ensure operationalization of technologies
Develop and maintain network security reference architectures, configuration baselines, and standards for on-prem, hybrid, and cloud environments
Partner with Network Engineering to ensure all network designs meet security standards pre-deployment
Drive consistent application of principles such as least privilege, secure routing, and network segmentation
Establish oversight processes for tracking adherence to standards, identifying deviations, and driving remediation accountability
Partner with Network Engineering amp; Operations teams to monitor posture metrics such as firewall hygiene, exposed ingress/egress, and segmentation health
Present posture insights and risk trends to the Technology and Security Leadership Teams and other company wide committees
Design and oversee data pipelines that consolidate inputs from various tools and network telemetry sources
Build and maintain network security dashboards that enable self-serve visibility for partner teams and security leadership
Partner with Exposure Management and Platform Security to integrate network data into enterprise-level dashboards
Use data analytics to identify systemic trends, quantify risk reduction, and inform prioritization decisions
Act as the bridge between Security Architecture, Network Operations, and Engineering, ensuring consistent alignment on priorities and controls
Lead alignment sessions to synchronize strategy, roadmaps, and metrics across Pamp;T Network and DTS Network
Provide expert consultation for major network initiatives, migrations, and design reviews

Benefits

Bonus: Sales personnel are eligible for variable incentive pay dependent on their achievement of pre-established sales goals. Non-Sales roles are eligible for a company bonus plan, which is calculated as a percentage of eligible wages and dependent on company performance.
Stock: This role is eligible to receive Restricted Stock Units (RSUs).
Paid Time Off: earned time off, as well as paid company holidays based on region
Paid Parental Leave: take up to six months off with your child after birth, adoption or foster care placement
Full Health Benefits Plans: options for 100% employer paid and minimum employee contribution health plans from day one of employment
Retirement Plans: select retirement and pension programs with potential for employer contributions
Learning and Development: options for coaching, online courses and education reimbursements
Compassionate Care Leave: paid time off following the loss of a loved one and other life-changing events

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume