Lead Software Engineer, Data Protection & Key Management

Docusign; Seattle (WA); Hybrid; USD 179,000 - 263,000; Full time

Benefits offered by this job

RSUs

Company bonus plan

Health benefits

Paid time off

Parental leave

Retirement plan

Learning & development

Compassionate care leave

Job summary

DocuSign is seeking a Lead Software Engineer for the Data Protection team to own cryptographic key management across our global infrastructure. You will drive enterprise-grade security, manage the key lifecycle, and ensure data protection across data stores and services.

This hands-on role reports to the Sr. Manager, Software Engineering and emphasizes secure, test-covered code and collaboration with cross-functional teams to advance encryption standards.

Qualifications

• 12+ years of hands-on development experience in C# or other object-oriented languages.
• 12+ years of software engineering experience in high-scale distributed systems.
• Experience with cloud Key Management Services (KMS) AWS KMS, Azure Key Vault, GCP Cloud KMS, or equivalent - including key lifecycle management and cross-tenant or cross-account key access patterns.
• Experience with encryption fundamentals key wrapping (DEK/KEK), asymmetric key operations, and cryptographic key lifecycle management.
• B.S. or M.S. in Computer Science or equivalent experience.

Responsibilities

• Design and build cryptographic key management systems for full key lifecycle across cloud environments at enterprise scale.
• Build and maintain tooling for health, observability, and reliability of cryptographic services.
• Drive adoption of encryption best practices across the platform for data protection.

Skills

C#

Distributed systems

KMS

Key lifecycle management

Cryptography

BS in CS

MS in CS

Education

BS in CS

MS in CS

Tools

Azure Key Vault

Terraform

CI/CD

Job description

DocuSign is seeking a Lead Software Engineer for the Data Protection team to own cryptographic key management across our global infrastructure. You will drive enterprise-grade security, manage the key lifecycle, and ensure data protection across data stores and services.

This hands-on role reports to the Sr. Manager, Software Engineering and emphasizes secure, test-covered code and collaboration with cross-functional teams to advance encryption standards.