Sr. IAM Security Engineer

Docusign10 months ago
San Francisco, CA, United States
Hybrid
Full-time
Junior Level (1-3 years)

Job Description

Position Overview

Docusign brings agreements to life. Over 1.5 million customers and more than a billion people in over 180 countries use Docusign solutions to accelerate business and simplify people’s lives. Using Docusign’s Intelligent Agreement Management platform, companies can create, commit, and manage agreements effectively.

The Identity and Access Management Security Engineer will drive the enterprise-wide identity and access management strategy by executing standards, collaborating across teams, and delivering best practices. This individual contributor role, reporting to the Group Vice President, Chief Information Security Officer, is part of a small, high-performing team.

Job Designation: Hybrid – Employees are required to work in-office a minimum of 2 days per week.

Key Responsibilities

  • Execute the organization’s identity and access management strategy and standards, aligning them with business objectives, digital transformation, and security requirements.
  • Contribute to a high-performing, product-driven team focused on measurable outcomes and continuous improvement.
  • Define, deliver, and continuously evolve best practices for identity and access management.
  • Collaborate with cross-functional teams to implement secure management of user accounts, permissions, and access policies.
  • Operationalize governance and guardrails for safe and compliant identity and access management usage.
  • Drive automation efforts to reduce human error and optimize workflows.
  • Advise on embedding best practices and features for identity and access management into both Docusign products and internal business practices.
  • Translate technical risks and opportunities into clear business impacts and recommendations.
  • Ensure practices adhere to internal security standards, industry frameworks, and regulatory requirements.
  • Define measurable success criteria and report outcomes to leadership.

Required Qualifications

  • 8+ years in identity and access management or related security disciplines.
  • Bachelor’s degree in computer science, data science, cybersecurity, risk management, artificial intelligence, machine learning, or a related field.
  • Experience contributing to identity and access management programs.
  • Expertise in enterprise security, risk mitigation, and governance of identity and access management issues within business processes and emerging technologies.
  • Proven ability to work with threat intelligence, CSIRT, PSIRT, Product, and Engineering teams to counter IAM risks.
  • Experience in data governance and security, including frameworks for managing attack surfaces and preventing data loss.
  • Experience defining security KPIs, building metrics pipelines, and implementing executive reporting frameworks.

Preferred Qualifications

  • Strong cross-functional collaboration and stakeholder management skills with Product, Engineering, IT, Data, Privacy, and executive teams.
  • Excellent communication skills across technical and non-technical audiences.
  • Certifications such as CISM, CRISC, CISSP, CCSP, CAIP, or equivalent.
  • Familiarity with attack surface monitoring, supply chain security, and continuous control validation.
  • Experience in driving automation strategies, predictive analytics, and leveraging data-driven insights.
  • Knowledge of frameworks such as NIST CSF, NIST AI RMF, ISO 27001, ISO 42001, FAIR, SOC 2, and FedRAMP.

Benefits & Perks

  • Compensation: Base salary in California ranges from $157,500.00 to $254,350.00. This role is eligible for bonus (company bonus plan for non-sales roles) and Restricted Stock Units (RSUs).
  • Paid Time Off: Earned time off and paid company holidays based on region.
  • Paid Parental Leave: Up to six months off following birth, adoption, or foster care placement.
  • Full Health Benefits Plans: Options include plans with 100% employer paid coverage and minimal employee contributions starting day one.
  • Retirement Plans: Select retirement and pension programs with potential for employer contributions.
  • Learning and Development: Opportunities for coaching, online courses, and education reimbursements.
  • Compassionate Care Leave: Paid time off following the loss of a loved one or other significant life events.

Required Skills

Automation
Compliance
Threat Intelligence
Risk Management
Data Governance
Identity and Access Management
Governance
Cross-functional Collaboration
Enterprise Security
Security Metrics Reporting