Senior Software Engineer

DocuSign; Chicago (IL); Hybrid; USD 158,000 - 224,000; Full time

Benefits offered by this job

RSUs

Health benefits

Paid time off

Parental leave

Job summary

DocuSign seeks a Senior Software Engineer to design, automate, and operate cloud and network infrastructure across Azure AKS and Google Cloud GKE. The role focuses on platforms that connect services, manage traffic, and enable reliable, secure delivery with strong ownership from design to deployment.

The position is hybrid, reporting to the Director, Software Engineering. You will mentor engineers, build reusable deployment patterns, and drive automated checks and GitOps workflows across

Qualifications

• Bachelor's degree in a related field.
• 8+ years of relevant experience.
• Experience in cloud, platform, DevOps, or SRE roles in production environments.
• Experience with Azure (AKS) and GCP (GKE) managed Kubernetes services.
• Experience with Kubernetes networking, operations, ingress/egress, security controls.
• Experience building platform abstractions for developers.
• Experience operating Istio and Envoy in multi‑cluster or multi‑cloud setups.
• Experience with Terraform, state management, and reusable infrastructure modules.
• Experience with Helm for application delivery and chart management.
• Experience scripting or programming in Go, Python, or Bash.
• Experience in on‑call operations, incident response, and root‑cause analysis.

Responsibilities

• Design, build, and operate production‑grade infrastructure across Azure, including AKS, and Google Cloud, including GKE.
• Develop reusable Terraform modules and patterns for secure, modular, and maintainable multi‑cloud infrastructure.
• Manage infrastructure state, environment configuration, dependencies, and lifecycle changes using Infrastructure as Code.
• Identify and resolve technical bottlenecks that affect major engineering initiatives.
• Design and operate Kubernetes platforms, including cluster networking, ingress, egress, routing, and policy enforcement.
• Implement and optimize Istio control‑plane and Envoy data‑plane capabilities across distributed clusters.
• Configure service‑mesh traffic management, including routing, retries, circuit breaking, canary releases, blue/green deployments, and failure isolation.
• Apply mutual TLS, authorization policies, and zero‑trust principles to protect service‑to‑service communication.
• Build reusable Helm charts, shared charts, and deployment patterns that enable consistent application delivery across engineering teams.
• Design and maintain declarative GitOps workflows using Argo CD.
• Build and improve Azure DevOps pipelines for infrastructure provisioning, validation, deployment, and application lifecycle management.
• Establish automated checks for configuration safety, policy compliance, test coverage, and deployment readiness.
• Improve release processes by making changes observable, repeatable, and recoverable.
• Define and maintain service‑level indicators, service‑level objectives, health metrics, dashboards, alerts, and operational runbooks for owned platforms.
• Use metrics, logs, traces, and system evidence to diagnose complex distributed‑system and networking issues.
• Participate in the on‑call rotation and confidently investigate alerts and incidents using documented procedures.
• Lead or contribute to root‑cause analyses and post‑incident reviews, including corrective actions that address systemic causes.
• Improve platform reliability through capacity planning, failure testing, rollback design, and operational automation.
• Author, review, and approve technical designs for multiple projects within the Network Cloud & Infrastructure domain.
• Gather requirements, clarify success measures, identify dependencies, provide accurate estimates, and communicate trade‑offs early.
• Work cross‑functionally with application engineering, security, SRE, cloud platform, and operations teams to align technical plans and remove blockers.
• Serve as a trusted technical resource for the team and provide clear, constructive code and design reviews.
• Mentor engineers through pairing, documentation, technical talks, runbooks, and practical coaching.
• Contribute to the improvement of engineering standards and practices

Skills

Cloud & DevOps

SRE

Kubernetes

Terraform

Envoy/Istio

Go/Python/Bash

On-call

Automation

Education

Bachelor's degree

Tools

Terraform

Helm

ArgoCD

GitOps

Azure DevOps

Kubernetes

Job description

Company Overview

Docusign brings agreements to life. More than 1.8 million customers and more than a billion people in over 180 countries use Docusign solutions to accelerate the process of doing business and simplify people's lives. With intelligent agreement management, Docusign unleashes business-critical data that is trapped inside of documents. Until now, these were disconnected from business systems of record, costing businesses time, money, and opportunity. Using the Docusign AI-native IAM platform, companies can create, commit, and manage agreements with solutions created by the #1 company in e-signature and contract lifecycle management (CLM).

What you’ll do

Docusign is seeking a Senior Software Engineer to design, automate, and operate reliable cloud and network infrastructure across Microsoft Azure and Google Cloud Platform. This role focuses on the platforms that connect services, manage traffic, and support secure, repeatable delivery across AKS and GKE environments. The successful candidate will work with minimal guidance across multiple components and projects. They will design extensible solutions, improve deployment and operational practices, troubleshoot complex distributed-system issues, and partner with application and infrastructure teams to deliver measurable improvements in reliability, security, and engineering efficiency. This role is hands‑on and requires strong ownership from design through deployment, validation, operations, and continuous improvement.

This position is an individual contributor role reporting to the Director, Software Engineering.

Responsibility

• Design, build, and operate production‑grade infrastructure across Azure, including AKS, and Google Cloud, including GKE
• Develop reusable Terraform modules and patterns for secure, modular, and maintainable multi‑cloud infrastructure
• Manage infrastructure state, environment configuration, dependencies, and lifecycle changes using Infrastructure as Code
• Identify and resolve technical bottlenecks that affect major engineering initiatives
• Design and operate Kubernetes platforms, including cluster networking, ingress, egress, routing, and policy enforcement
• Implement and optimize Istio control‑plane and Envoy data‑plane capabilities across distributed clusters
• Configure service‑mesh traffic management, including routing, retries, circuit breaking, canary releases, blue/green deployments, and failure isolation
• Apply mutual TLS, authorization policies, and zero‑trust principles to protect service‑to‑service communication
• Build reusable Helm charts, shared charts, and deployment patterns that enable consistent application delivery across engineering teams
• Design and maintain declarative GitOps workflows using Argo CD
• Build and improve Azure DevOps pipelines for infrastructure provisioning, validation, deployment, and application lifecycle management
• Establish automated checks for configuration safety, policy compliance, test coverage, and deployment readiness
• Improve release processes by making changes observable, repeatable, and recoverable
• Define and maintain service‑level indicators, service‑level objectives, health metrics, dashboards, alerts, and operational runbooks for owned platforms
• Use metrics, logs, traces, and system evidence to diagnose complex distributed‑system and networking issues
• Participate in the on‑call rotation and confidently investigate alerts and incidents using documented procedures
• Lead or contribute to root‑cause analyses and post‑incident reviews, including corrective actions that address systemic causes
• Improve platform reliability through capacity planning, failure testing, rollback design, and operational automation
• Author, review, and approve technical designs for multiple projects within the Network Cloud & Infrastructure domain
• Gather requirements, clarify success measures, identify dependencies, provide accurate estimates, and communicate trade‑offs early
• Work cross‑functionally with application engineering, security, SRE, cloud platform, and operations teams to align technical plans and remove blockers
• Serve as a trusted technical resource for the team and provide clear, constructive code and design reviews
• Mentor engineers through pairing, documentation, technical talks, runbooks, and practical coaching
• Contribute to the improvement of engineering standards and practices

Job Designation

Hybrid: Employee divides their time between in‑office and remote work. Access to an office location is required. (Frequency: Minimum 2 days per week; may vary by team but will be weekly in‑office expectation)

Positions at Docusign are assigned a job designation of either In Office, Hybrid or Remote and are specific to the role/job. Preferred job designations are not guaranteed when changing positions within Docusign. Docusign reserves the right to change a position's job designation depending on business needs and as permitted by local law.

What you bring

Basic

• Bachelor's degree in a related field
• 8+ years of relevant experience
• Experience in cloud, platform, DevOps, or SRE roles in production environments
• Experience with Azure (AKS) and GCP (GKE) managed Kubernetes services
• Experience with Kubernetes (networking, operations, ingress/egress, security controls)
• Experience building platform abstractions for developers
• Experience operating Istio and Envoy in multi‑cluster or multi‑cloud setups
• Experience with Terraform, state management, and reusable infrastructure modules
• Experience with Helm for application delivery and chart management
• Experience scripting or programming in Go, Python, or Bash
• Experience in on‑call operations, incident response, and root‑cause analysis

Preferred

• Experience with observability platforms such as Prometheus, Grafana, Jaeger, or OpenTelemetry
• Advanced Envoy routing, filter, and gateway configuration
• Knowledge of zero‑trust architecture, including mTLS, authorization policies, and IAM controls
• Familiarity with Azure and GCP networking, DNS, load balancing, and private connectivity
• Experience with GitOps workflows using Argo CD or equivalent tools
• Experience building and troubleshooting Azure DevOps CI/CD pipelines
• Design experience with progressive delivery, canary deployments, and disaster recovery
• Understanding of compliance and regulated cloud standards (e.g., FedRAMP, SOC)
• Track record of enhancing developer experience via automation and self‑service infrastructure
• Involvement in technical hiring and cross‑team engineering mentorship
• Strong communication skills to manage technical trade‑offs, risks, and project estimation

Wage Transparency

Pay for this position is based on a number of factors including geographic location and may vary depending on job‑related knowledge, skills, and experience.

Based on applicable legislation, the below details pay ranges in the following locations:

California: $164,700.00 - $266,000.00 base salary

Illinois, Colorado, Massachusetts and Minnesota: $158,300.00 - $223,625.00 base salary

Washington, Maryland, New Jersey and New York (including NYC metro area): $158,300.00 - $232,575.00 base salary

• Bonus: Sales personnel are eligible for variable incentive pay dependent on their achievement of pre‑established sales goals. Non‑Sales roles are eligible for a company bonus plan, which is calculated as a percentage of eligible wages and dependent on company performance.
• Stock: This role is eligible to receive Restricted Stock Units (RSUs).

Global benefits provide options for the following:

• Paid Time Off: earned time off, as well as paid company holidays based on region
• Paid Parental Leave: take up to six months off with your child after birth, adoption or foster care placement
• Full Health Benefits Plans: options for 100% employer paid and minimum employee contribution health plans from day one of employment
• Retirement Plans: select retirement and pension programs with potential for employer contributions
• Learning and Development: options for coaching, online courses and education reimbursements
• Compassionate Care Leave: paid time off following the loss of a loved one and other life‑changing events

Life at Docusign

Docusign is committed to building trust and making the world more agreeable for our employees, customers and the communities in which we live and work. You can count on us to listen, be honest, and try our best to do what's right, every day. At Docusign, everything is equal.

We each have a responsibility to ensure every team member has an equal opportunity to succeed, to be heard, to exchange ideas openly, to build lasting relationships, and to do the work of their life. Best of all, you will be able to feel deep pride in the work you do, because your contribution helps us make the world better than we found it. And for that, you'll be loved by us, our customers, and the world in which we live.

Accommodation

Docusign is committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need such an accommodation, or a religious accommodation, during the application process, please contact us at [e-mail].

Applicant and Candidate Privacy Notice

States Not Eligible for Employment

This position is not eligible for employment in the following states: Alaska, Hawaii, Maine, Mississippi, North Dakota, South Dakota, Vermont, West Virginia and Wyoming.

Equal Opportunity Employer

It's important to us that we build a talented team that is as diverse as our customers and where all employees feel a deep sense of belonging and thrive. We encourage great talent who bring a range of perspectives to apply for our open positions. Docusign is an Equal Opportunity Employer and makes hiring decisions based on experience, skill, aptitude and a can‑do approach. We will not discriminate based on race, ethnicity, color, age, sex, religion, national origin, ancestry, pregnancy, sexual orientation, gender identity, gender expression, genetic information, physical or mental disability, registered domestic partner status, caregiver status, marital status, veteran or military status, or any other legally protected category.

EEO Know Your Rights poster

#LI-Hybrid