Lead Software Engineer - Data Protection

Docusign • Seattle, WA

4d • Hybrid

About The Position

As a Lead Software Engineer on Docusign’s Data Protection team, you will help build the cryptographic foundation for its global infrastructure. You will lead engineering for the enterprise key management platform, which enables customers to control their encryption keys, and extend cryptographic protection across data stores and services. You will also help shape how key management and cryptographic controls evolve with the platform to meet industry standards and enterprise customer expectations.

This is a hands-on individual contributor role focused on technical direction, platform security, and trusted data protection solutions. You will develop high-quality, fully tested software and help ensure the security and reliability customers depend on. The role reports to the Sr. Manager, Software Engineering.

The position is hybrid, with a required weekly in-office expectation of at least two days per week. The designation and frequency may vary with team needs, and Docusign reserves the right to change the job designation as permitted by law.

Requirements

• 12+ years of hands-on development experience in C# or other object-oriented languages.
• 12+ years of software engineering experience in high-scale distributed systems.
• Experience with cloud Key Management Services (KMS), such as AWS KMS, Azure Key Vault, or GCP Cloud KMS, including key lifecycle management and cross-tenant or cross-account key access patterns.
• Experience with encryption fundamentals, including the DEK/KEK key-wrapping model, asymmetric key operations, and cryptographic key lifecycle management.
• B.S. or M.S. in Computer Science, or equivalent experience.

Nice To Haves

• Experience with .NET microservice architecture (C#) in a high-scale production environment.
• Hands-on experience with Azure Key Vault RBAC authorization, Managed Identity integration, Encryption Scopes, and CMK-enabled data services.
• Experience with cloud infrastructure provisioning at scale, including Terraform, Bicep, or equivalent IaC tooling; per-tenant resource automation; and multi-region deployments.
• Experience building monitoring and alerting for cryptographic services, including key access health and resource state observability.
• Experience building large-scale, highly available, and reliable applications.
• Experience with CI/CD pipelines and DevSecOps practices.
• Strong organizational, problem-solving, communication, and collaboration skills.

Responsibilities

• Design and build cryptographic key management systems supporting key generation, distribution, rotation, revocation, and expiry across cloud environments at enterprise scale.
• Build and maintain operational tooling for the health, observability, and reliability of cryptographic services and key integrations.
• Drive adoption of encryption best practices across Docusign’s platform and establish and evolve standards for data-at-rest and data-in-transit protection.
• Collaborate with engineering teams to advise on encryption patterns, key management constraints, and data isolation boundaries, ensuring systems meet data protection requirements.
• Contribute to threat modeling and security design reviews for platform initiatives, identifying cryptographic and data protection risks early in development.
• Develop high-quality, ship-ready code covered by a full test suite.
• Conduct design and code reviews with a focus on security and availability.

Benefits

• Company bonus plan for non-sales roles, calculated as a percentage of eligible wages and dependent on company performance.
• Restricted Stock Units (RSUs).
• Paid time off and paid company holidays based on region.
• Paid parental leave of up to six months following birth, adoption, or foster care placement.
• Health benefit plans, including options that are 100% employer paid and options with minimum employee contributions, available from the first day of employment.
• Retirement and pension programs, with potential employer contributions.
• Learning and development options, including coaching, online courses, and education reimbursements.
• Compassionate care leave following the loss of a loved one and other life-changing events.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior