Senior Software Engineer

Company Overview

Docusign brings agreements to life. More than 1.8 million customers and more than a billion people in over 180 countries use Docusign solutions to accelerate the process of doing business and simplify people’s lives. With intelligent agreement management, Docusign unleashes business-critical data that is trapped inside of documents. Until now, these were disconnected from business systems of record, costing businesses time, money, and opportunity. Using the Docusign AI-native IAM platform, companies can create, commit, and manage agreements with solutions created by the #1 company in e-signature and contract lifecycle management (CLM).

What you'll do

Docusign is seeking a Senior Software Engineer to design, automate, and operate reliable cloud and network infrastructure across Microsoft Azure and Google Cloud Platform. This role focuses on the platforms that connect services, manage traffic, and support secure, repeatable delivery across AKS and GKE environments. The successful candidate will work with minimal guidance across multiple components and projects. They will design extensible solutions, improve deployment and operational practices, troubleshoot complex distributed-system issues, and partner with application and infrastructure teams to deliver measurable improvements in reliability, security, and engineering efficiency. This role is hands-on and requires strong ownership from design through deployment, validation, operations, and continuous improvement.

This position is an individual contributor role reporting to the Director, Software Engineering.

Responsibility

• Design, build, and operate production-grade infrastructure across Azure, including AKS, and Google Cloud, including GKE
• Develop reusable Terraform modules and patterns for secure, modular, and maintainable multi-cloud infrastructure
• Manage infrastructure state, environment configuration, dependencies, and lifecycle changes using Infrastructure as Code
• Identify and resolve technical bottlenecks that affect major engineering initiatives
• Design and operate Kubernetes platforms, including cluster networking, ingress, egress, routing, and policy enforcement
• Implement and optimize Istio control-plane and Envoy data-plane capabilities across distributed clusters
• Configure service-mesh traffic management, including routing, retries, circuit breaking, canary releases, blue/green deployments, and failure isolation
• Apply mutual TLS, authorization policies, and zero-trust principles to protect service-to-service communication
• Build reusable Helm charts, shared charts, and deployment patterns that enable consistent application delivery across engineering teams
• Design and maintain declarative GitOps workflows using Argo CD
• Build and improve Azure DevOps pipelines for infrastructure provisioning, validation, deployment, and application lifecycle management
• Establish automated checks for configuration safety, policy compliance, test coverage, and deployment readiness
• Improve release processes by making changes observable, repeatable, and recoverable
• Define and maintain service-level indicators, service-level objectives, health metrics, dashboards, alerts, and operational runbooks for owned platforms
• Use metrics, logs, traces, and system evidence to diagnose complex distributed-system and networking issues
• Participate in the on-call rotation and confidently investigate alerts and incidents using documented procedures
• Lead or contribute to root-cause analyses and post-incident reviews, including corrective actions that address systemic causes
• Improve platform reliability through capacity planning, failure testing, rollback design, and operational automation
• Author, review, and approve technical designs for multiple projects within the Network Cloud & Infrastructure domain
• Gather requirements, clarify success measures, identify dependencies, provide accurate estimates, and communicate trade-offs early
• Work cross-functionally with application engineering, security, SRE, cloud platform, and operations teams to align technical plans and remove blockers
• Serve as a trusted technical resource for the team and provide clear, constructive code and design reviews
• Mentor engineers through pairing, documentation, technical talks, runbooks, and practical coaching
• Contribute to the improvement of engineering standards and practices

Job Designation

Hybrid: Employee divides their time between in-office and remote work. Access to an office location is required. (Frequency: Minimum 2 days per week; may vary by team but will be weekly in-office expectation)

Positions at Docusign are assigned a job designation of either In Office, Hybrid or Remote and are specific to the role/job. Preferred job designations are not guaranteed when changing positions within Docusign. Docusign reserves the right to change a position's job designation depending on business needs and as permitted by local law.

What you bring

Basic

• Bachelor's degree in a related field
• 8+ years of relevant experience
• Experience in cloud, platform, DevOps, or SRE roles in production environments
• Experience with Azure (AKS) and GCP (GKE) managed Kubernetes services
• Experience with Kubernetes (networking, operations, ingress/egress, security controls)
• Experience building platform abstractions for developers
• Experience operating Istio and Envoy in multi-cluster or multi-cloud setups
• Experience with Terraform, state management, and reusable infrastructure modules
• Experience with Helm for application delivery and chart management
• Experience scripting or programming in Go, Python, or Bash
• Experience in on-call operations, incident response, and root-cause analysis

Preferred

• Experience with observability platforms such as Prometheus, Grafana, Jaeger, or OpenTelemetry
• Advanced Envoy routing, filter, and gateway configuration
• Knowledge of zero-trust architecture, including mTLS, authorization policies, and IAM controls
• Familiarity with Azure and GCP networking, DNS, load balancing, and private connectivity
• Experience with GitOps workflows using Argo CD or equivalent tools
• Experience building and troubleshooting Azure DevOps CI/CD pipelines
• Design experience with progressive delivery, canary deployments, and disaster recovery
• Understanding of compliance and regulated cloud standards (e.g., FedRAMP, SOC)
• Track record of enhancing developer experience via automation and self-service infrastructure
• Involvement in technical hiring and cross-team engineering mentorship
• Strong communication skills to manage technical trade-offs, risks, and project estimation

Wage Transparency

Pay for this position is based on a number of factors including geographic location and may vary depending on job-related knowledge, skills, and experience.

Based on applicable legislation, the below details pay ranges in the following locations:

California: $164,700.00 - $266,000.00 base salary

Illinois, Colorado, Massachusetts and Minnesota: $158,300.00 - $223,625.00 base salary

Washington, Maryland, New Jersey and New York (including NYC metro area): $158,300.00 - $232,575.00 base salary

This role is also eligible for the following:

• Bonus: Sales personnel are eligible for variable incentive pay dependent on their achievement of pre-established sales goals. Non-Sales roles are eligible for a company bonus plan, which is calculated as a percentage of eligible wages and dependent on company performance.
• Stock: This role is eligible to receive Restricted Stock Units (RSUs).

Global benefits provide options for the following:

• Paid Time Off: earned time off, as well as paid company holidays based on region
• Paid Parental Leave: take up to six months off with your child after birth, adoption or foster care placement
• Full Health Benefits Plans: options for 100% employer paid and minimum employee contribution health plans from day one of employment

…