Lead Cryptography & Key Management Engineer

Docusign; Seattle (WA); Hybrid; USD 179,000 - 263,000; Full time

Benefits offered by this job

Paid Time Off

Full Health Benefits

Parental Leave

Retirement Plans

Learning and Development

Job summary

Docusign is seeking a Lead Software Engineer on the Data Protection team to build the cryptographic foundation for our global infrastructure. You will own the enterprise key management platform, enabling customers to control encryption keys and extend protection across data stores and services.

This hands-on role drives technical direction, secures the platform, and supports Docusign's Intelligent Agreement Management with trusted data protection solutions for enterprise customers.

Qualifications

• 12+ years hands-on development in C# and object-oriented languages.
• 12+ years of software engineering in high-scale distributed systems.
• Experience with cloud KMS (AWS KMS, Azure Key Vault, GCP KMS).
• BS/MS in Computer Science or equivalent experience.

Responsibilities

• Design and build cryptographic key management systems for full lifecycle.
• Develop tooling for health, observability, and reliability of cryptographic services.
• Promote encryption best practices across the platform for data protection.
• Advise on encryption patterns, key management constraints, and data isolation.
• Contribute to threat modeling and security design reviews for new initiatives.
• Deliver high-quality, test-covered code ready for production.

Skills

C# development

Distributed systems

Cloud KMS

Encryption basics

Security design

Education

B.S. or M.S. in Computer Science

Tools

Azure Key Vault

Terraform

Bicep

CI/CD/DevSecOps

Job description

Docusign is seeking a Lead Software Engineer on the Data Protection team to build the cryptographic foundation for our global infrastructure. You will own the enterprise key management platform, enabling customers to control encryption keys and extend protection across data stores and services.

This hands-on role drives technical direction, secures the platform, and supports Docusign's Intelligent Agreement Management with trusted data protection solutions for enterprise customers.