What you'll doWe are building an internal engineering function dedicated to owning the reliability, code-ification, and continuous delivery of our enterprise security tooling - replacing legacy, one-off consulting work with modern software engineering practices. As our founding Lead Site Reliability Engineer, you will architect and drive the infrastructure-as-code, automation, and operational maturity across our entire security platform portfolio - including SIEM/SOAR, EDR/NDR/XDR, SAST/DAST, CNAPP/CSPM. Partnering closely with Core Platform and DevOps engineering teams, you will establish high availability, self-service developer tooling, and automated guardrails at scale.
This position is an individual contributor role reporting to the Director, Identity and Access Management.
Responsibility- Build and manage the underlying infrastructure, monitoring, telemetry, and compute environments to relieve downstream security teams of infrastructure overhead
- Lead engineering and IaC strategy for Microsoft Sentinel, including ingestion pipelines, workspace governance, detection frameworks, and cost optimization
- Develop reusable, hardened Terraform and Bicep/ARM modules deployed via automated CI/CD pipelines with integrated policy-as-code gates
- Architect cross-functional orchestration workflows connecting ITSM, messaging channels, and SIEM/SOAR platforms to streamline evidence collection and incident remediation
- Stand up automated, on-demand security sandboxes to support offensive security exercises and adversary simulation testing
- Establish infrastructure and monitoring capabilities to support dynamic safety validation and testing of AI-driven tools prior to production rollout
- Contribute to an internal developer portal offering visibility into vulnerability metrics, automated fix workflows, and guardrails
- Streamline compliance reporting by automating evidence gathering against regulatory benchmarks and industry security frameworks
- Mentor engineers across distributed teams, guide technical roadmap decisions, and champion operational excellence across the organization
Job DesignationHybrid: Employee divides their time between in-office and remote work. Access to an office location is required. (Frequency: Minimum 2 days per week; may vary by team but will be weekly in-office expectation)
Positions at Docusign are assigned a job designation of either In Office, Hybrid or Remote and are specific to the role/job. Preferred job designations are not guaranteed when changing positions within Docusign. Docusign reserves the right to change a position's job designation depending on business needs and as permitted by local law.
What you bringBasic- 12+ years of experience in SRE, cloud infrastructure, platform engineering, or security engineering with a Bachelor's degree or 8+ years of experience with a Master's degree
- 3+ years of experience leading a production platform as a senior or lead engineer
- Experience with Microsoft Sentinel and Azure Monitor/Log Analytics (workspace topology, connectors, KQL, automation rules, and playbooks)
- Experience with Terraform (custom modules, state architecture, multi-environment design)
- Experience building and managing automated release pipelines using Azure DevOps Pipelines, GitHub Actions, or similar platforms
- Experience with Python development
- Experience defining SLOs/SLIs, error budget management, observability strategies, incident response rotation design, and blameless postmortems
- Experience with technical writing and aligning stakeholders across Security, DevOps, and Product engineering
Preferred- Experience extending security platform patterns to AWS or GCP environments
- Familiarity with OPA/Rego, Azure Policy, or static analysis tools like Checkov
- Prior experience automating compliance controls for SOC 2, ISO 27001, or FedRAMP benchmarks
- Microsoft SC-200, AZ-500, AZ-400, or HashiCorp Certified: Terraform Associate
- Familiarity with ARM or Bicep
- Experience with C#/.NET, Kubernetes, or container runtimes
Wage TransparencyPay for this position is based on a number of factors including geographic location and may vary depending on job-related knowledge, skills, and experience.
Based on applicable legislation, the below details pay ranges in the following locations:
Washington, Maryland, New Jersey and New York (including NYC metro area): $158,300.00 - $232,575.00 annual base salary
This role is also eligible for the following:
- Bonus: Sales personnel are eligible for variable incentive pay dependent on their achievement of pre-established sales goals. Non-Sales roles are eligible for a company bonus plan, which is calculated as a percentage of eligible wages and dependent on company performance.
- Stock: This role is eligible to receive Restricted Stock Units (RSUs).
Global benefits provide options for the following:
- Paid Time Off: earned time off, as well as paid company holidays based on region
- Paid Parental Leave: take up to six months off with your child after birth, adoption or foster care placement
- Full Health Benefits Plans: options for 100% employer paid and minimum employee contribution health plans from day one of employment
- Retirement Plans: select retirement and pension programs with potential for employer contributions
- Learning and Development: options for coaching, online courses and education reimbursements
- Compassionate Care Leave: paid time off following the loss of a loved one and other life-changing events
Work Authorization Notice: Please note that we do not provide visa sponsorship or immigration support for this position. Applicants must already be authorized to work in the United States on a full-time, permanent basis without the need for current or future sponsorship.
#LI-Hybrid
