About the position
In this role, you will be a key member of the team that manages user identities and provides appropriate access to resources across all of Docusign's product infrastructure. This system is the gateway through which all engineers and operations personnel gain access to VMs, containers, databases and other data stores, networking elements etc. The goal is to ingest identity information from the corporate identity management systems, and apply roles and policies to govern access to production systems on which the Docusign products are deployed. Automation is key to ensure that the systems are secure by default, while at the same time engineers and operations team members get the access they need to ensure a great experience for Docusign customers. This position is an individual contributor role reporting to the Sr. Manager, Engineering.
Responsibilities
- Design, develop and operate services and systems that manage the identities for all users of Docusign's infrastructure which includes private and public clouds and implement features such as JIT, JML, PIM, PAM and RBAC in a robust and scalable manner
- Partner cross functionally with security, compliance and engineering teams and build tooling to ensure that all access activities are logged and properly audited
- Evaluate current trends in this field and ensure that new tools and features are adopted in a timely manner
- Participate in an on call rotation schedule
Requirements
- Bachelors in Computer Science, Electrical Engineering, Information Systems, Informatics or equivalent
- 2+ years development experience with focus on identity and access management systems
- Experience with programming languages and automation tools (PowerShell, C#, .NET, Ansible, Python, Java, Go, Node.js, terraform, docker etc.)
- Experience developing scalable, maintainable, and secure software solutions
- Experience with the underlying infrastructure of systems at scale including auto scaling, monitoring, self healing and disaster recovery
Nice-to-haves
- Masters in Computer Science
- Production SRE or architecture experience with Active Directory, supporting multi-domain, Windows-based production systems with scripting skills using PowerShell
- Knowledge of Azure Entra ID, hybrid connectivity with Entra ID Connect
- Identity concepts including RBAC, PIM/PAM, etc.
- Terraform, Bicep, or ARM templates
- Experience developing software that runs in hybrid cloud environments
- Experience working cross functionally such as security and compliance functions
- Ability to communicate to both technical and non technical audiences
- Experience working with multiple vendors in the identity and access management ecosystem
Benefits
- Paid Time Off: earned time off, as well as paid company holidays based on region
- Paid Parental Leave: take up to six months off with your child after birth, adoption or foster care placement
- Full Health Benefits Plans: options for 100% employer paid and minimum employee contribution health plans from day one of employment
- Retirement Plans: select retirement and pension programs with potential for employer contributions
- Learning and Development: options for coaching, online courses and education reimbursements
- Compassionate Care Leave: paid time off following the loss of a loved one and other life-changing events
