Software Engineer

Identity Management Engineer

Company Overview Docusign brings agreements to life. Over 1.5 million customers and more than a billion people in over 180 countries use Docusign solutions to accelerate the process of doing business and simplify people's lives. With intelligent agreement management, Docusign unleashes business-critical data that is trapped inside of documents. Until now, these were disconnected from business systems of record, costing businesses time, money, and opportunity. Using Docusign's Intelligent Agreement Management platform, companies can create, commit, and manage agreements with solutions created by the #1 company in e-signature and contract lifecycle management (CLM).

What You'll Do In this role, you will be a key member of the team that manages user identities and provides appropriate access to resources across all of Docusign's product infrastructure. This system is the gateway through which all engineers and operations personnel gain access to VMs, containers, databases and other data stores, networking elements etc. The goal is to ingest identity information from the corporate identity management systems, and apply roles and policies to govern access to production systems on which the Docusign products are deployed. Automation is key to ensure that the systems are secure by default, while at the same time engineers and operations team members get the access they need to ensure a great experience for Docusign customers. This position is an individual contributor role reporting to the Sr. Manager, Engineering.

Responsibilities Design, develop and operate services and systems that manage the identities for all users of Docusign's infrastructure which includes private and public clouds and implement features such as JIT, JML, PIM, PAM and RBAC in a robust and scalable manner Partner cross functionally with security, compliance and engineering teams and build tooling to ensure that all access activities are logged and properly audited Evaluate current trends in this field and ensure that new tools and features are adopted in a timely manner Participate in an on call rotation schedule

Job Designation Hybrid: Employee divides their time between in-office and remote work. Access to an office location is required. (Frequency: Minimum 2 days per week; may vary by team but will be weekly in-office expectation) Positions at Docusign are assigned a job designation of either In Office, Hybrid or Remote and are specific to the role/job. Preferred job designations are not guaranteed when changing positions within Docusign. Docusign reserves the right to change a position's job designation depending on business needs and as permitted by local law.

What You Bring Basic Bachelors in Computer Science, Electrical Engineering, Information Systems, Informatics or equivalent 2+ years development experience with focus on identity and access management systems Experience with programming languages and automation tools (PowerShell, C#, .NET, Ansible, Python, Java, Go, Node.js, terraform, docker etc.) Experience developing scalable, maintainable, and secure software solutions Experience with the underlying infrastructure of systems at scale including auto scaling, monitoring, self healing and disaster recovery Preferred Masters in Computer Science Production SRE or architecture experience with Active Directory, supporting multi-domain, Windows-based production systems with scripting skills using PowerShell Knowledge of Azure Entra ID, hybrid connectivity with Entra ID Connect Identity concepts including RBAC, PIM/PAM, etc. Terraform, Bicep, or ARM templates Experience developing software that runs in hybrid cloud environments Experience working cross functionally such as security and compliance functions Ability to communicate to both technical and non technical a