Lead Software Engineer - Data Protection

Docusign • Seattle, WA

5d • Hybrid

About The Position

As a Lead Software Engineer on Docusign’s Data Protection team, you will build the cryptographic foundation for the company’s global infrastructure. You will drive engineering for the enterprise key management platform, including systems that let customers control their encryption keys and extend cryptographic protection across data stores and services. You will also help define how key management and cryptographic controls evolve with the platform and enterprise expectations. This hands-on individual contributor role includes driving technical direction, strengthening platform security, and delivering data protection solutions for enterprise customers. The position reports to the Sr. Manager, Software Engineering.

The role is hybrid, with a required weekly in-office expectation of at least two days per week. Frequency may vary by team.

Requirements

• 12 or more years of hands-on development experience in C# or other object-oriented languages.
• 12 or more years of software engineering experience in high-scale distributed systems.
• Experience with cloud Key Management Services (KMS), such as AWS KMS, Azure Key Vault, or GCP Cloud KMS, including key lifecycle management and cross-tenant or cross-account key access patterns.
• Experience with encryption fundamentals, including the DEK/KEK key-wrapping model, asymmetric key operations, and cryptographic key lifecycle management.
• B.S. or M.S. in Computer Science, or equivalent experience.

Nice To Haves

• Experience with .NET microservice architecture (C#) in a high-scale production environment.
• Hands-on experience with Azure Key Vault RBAC authorization, Managed Identity integration, Encryption Scopes, and CMK-enabled data services.
• Experience with cloud infrastructure provisioning at scale, including IaC tools such as Terraform or Bicep, per-tenant resource automation, and multi-region deployments.
• Experience building monitoring and alerting for cryptographic services, including key access health and resource state observability.
• Experience building large-scale, highly available, and reliable applications.
• Experience with CI/CD pipelines and DevSecOps practices.
• Strong organizational, problem-solving, communication, and collaboration skills.

Responsibilities

• Design and build cryptographic key management systems for the full key lifecycle—including generation, distribution, rotation, revocation, and expiry—across cloud environments at enterprise scale.
• Build and maintain operational tooling for the health, observability, and reliability of cryptographic services and key integrations.
• Drive adoption of encryption best practices across Docusign’s platform and establish and evolve standards for data-at-rest and data-in-transit protection.
• Collaborate with engineering teams across the company to help ensure systems meet data protection requirements, advising on encryption patterns, key management constraints, and data isolation boundaries.
• Contribute to threat modeling and security design reviews for platform initiatives, identifying cryptographic and data protection risks early in development.
• Develop high-quality, ship-ready code covered by a full test suite.
• Conduct design and code reviews with a focus on security and availability.

Benefits

• Company bonus plan for non-sales roles, calculated as a percentage of eligible wages and dependent on company performance.
• Restricted Stock Units (RSUs).
• Paid time off and paid company holidays based on region.
• Paid parental leave of up to six months following birth, adoption, or foster care placement.
• Health benefit plans, including options with 100% employer-paid and minimum employee-contribution plans from the first day of employment.
• Retirement and pension programs with potential employer contributions.
• Learning and development options, including coaching, online courses, and education reimbursements.
• Compassionate care leave following the loss of a loved one and other life-changing events.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior