D

Docusign

Runs electronic signing and agreement workflows

Lead Software Engineer - Identity & Authentication Platform

Backend EngineeringUpdated on Nov 5
Full-timeSeattle, WA, USA

About the Job

Requirements

  • At least 12 years of professional software engineering experience, or equivalent practical experience.
  • Experience designing, building, and operating production backend services and distributed systems.
  • Experience programming in one or more modern languages such as Java, C#, Go, or TypeScript/Node.js.
  • Experience building or integrating authentication and identity systems.
  • Experience with OAuth 2.0/OAuth 2.1 concepts and flows, including authorization code with PKCE, client credentials, refresh tokens, scopes, consent, and token lifetime management; OpenID Connect (OIDC), including ID tokens, claims, discovery, nonce/state validation, and JWKS/key rotation; SAML 2.0, including service-provider and identity-provider concepts, assertions, metadata, certificates, and single sign-on; and JWTs, signing and verification, key management, token validation, and common implementation risks.
  • Experience applying secure-by-design practices, threat modeling, and defense against common authentication vulnerabilities.
  • Experience designing RESTful APIs and integrating with internal or external identity providers.
  • Experience leading technical decisions, simplifying complex systems, and delivering outcomes across team boundaries.

Responsibilities

  • Lead the architecture, design, implementation, and operation of secure, scalable authentication and identity services.
  • Own significant technical initiatives from problem definition and design through implementation, launch, and ongoing operation.
  • Build highly available APIs and distributed services supporting authentication, authorization, token issuance, federation, session management, and identity lifecycle workflows.
  • Apply authentication and authorization standards appropriately to real-world product and platform requirements.
  • Partner with Product Management, Security, Infrastructure, and application engineering teams to define requirements, evaluate tradeoffs, and deliver reliable solutions.
  • Establish and evolve engineering practices for security, availability, observability, testing, and incident response.
  • Investigate complex production issues, lead root-cause analysis, and drive durable improvements to prevent recurrence.
  • Review designs and code, provide technical mentorship, and help grow the authentication engineering community.
  • Communicate with technical and non-technical stakeholders, influence decisions, and build alignment across teams.
  • Contribute to a collaborative culture focused on customer trust, engineering excellence, and continuous improvement.

Desired Qualifications

  • Experience with large-scale, multi-region, highly available identity or security platforms.
  • Experience with WebAuthn, FIDO2, passkeys, MFA, adaptive authentication, or risk-based access controls.
  • Experience with OAuth 2.0 extensions or related patterns such as JWT bearer assertions, certificate-based client authentication, or token exchange.
  • Experience operating services with strong reliability, latency, and security requirements.
  • Experience with MSF services and service decomposition, including breaking larger services into smaller, well-bounded services with clear interfaces, ownership, and migration plans.
  • Familiarity with containers, orchestration, cloud platforms, CI/CD, and infrastructure automation.
  • Experience with observability platforms for metrics, logs, tracing, security events, and auditability.
  • Experience working with privacy, compliance, or enterprise security requirements.
  • Strong written and verbal communication skills, with a track record of mentoring engineers and influencing architecture.

About the Company

Docusign

Runs electronic signing and agreement workflows

Docusign runs electronic signing and agreement management software for businesses, letting people approve contracts online and track the steps around each agreement. Its eSignature product routes documents to signers and records who signed, while contract lifecycle tools organize preparation, negotiation, and approvals. The Intelligent Agreement Management platform stores contracts in a searchable repository and uses AI to extract terms and connect agreement data to business workflows. Customers use its web applications or embed signing through APIs, and pay for subscriptions based on users, features, and document allowances. Docusign was founded in 2003 and is headquartered in San Francisco.

Company size
5,001-10,000
Company stage
IPO
Headquarters
San Francisco, CA
Founded
2003

Recently Posted Jobs

Explore more opportunities at Docusign

See more jobs