Lead Network Security Architect
About the position Responsibilities
- Own Docusign's Network Security Strategy, defining the roadmap for network hardening, segmentation, and Zero Trust integration
- Align strategy with enterprise objectives around customer trust, attack surface reduction, and data-driven decision-making
- Evaluate new network security technologies (SASE, SSE, micro-segmentation, etc.) for enterprise adoption and ensure operationalization of technologies
- Develop and maintain network security reference architectures, configuration baselines, and standards for on-prem, hybrid, and cloud environments
- Partner with Network Engineering to ensure all network designs meet security standards pre-deployment
- Drive consistent application of principles such as least privilege, secure routing, and network segmentation
- Establish oversight processes for tracking adherence to standards, identifying deviations, and driving remediation accountability
- Partner with Network Engineering amp; Operations teams to monitor posture metrics such as firewall hygiene, exposed ingress/egress, and segmentation health
- Present posture insights and risk trends to the Technology and Security Leadership Teams and other company wide committees
- Design and oversee data pipelines that consolidate inputs from various tools and network telemetry sources
- Build and maintain network security dashboards that enable self-serve visibility for partner teams and security leadership
- Partner with Exposure Management and Platform Security to integrate network data into enterprise-level dashboards
- Use data analytics to identify systemic trends, quantify risk reduction, and inform prioritization decisions
- Act as the bridge between Security Architecture, Network Operations, and Engineering, ensuring consistent alignment on priorities and controls
- Lead alignment sessions to synchronize strategy, roadmaps, and metrics across Pamp;T Network and DTS Network
- Provide expert consultation for major network initiatives, migrations, and design reviews Requirements
- 12+ years of experience in network architecture, security architecture, or related roles in large-scale enterprise or cloud environments
- Experience with network security technologies: firewalls/WAF, VPNs, SD-WAN, proxies, IDS/IPS, and routing protocols
- Experience with cloud networking, segmentation, and hybrid connectivity models
- Experience developing and governing enterprise network security standards and reference architectures
- Experience with data modeling, dashboarding, or data visualization tools (e.g., Power BI, Tableau, or equivalent)
- Experience with NIST CSF, CIS, and Zero Trust frameworks Nice-to-haves
- Preferred certifications: CCIE Security, CCSP, CISSP, or equivalent experience
- Experience mentoring or managing technical contributors
- Exceptional communication, influence, and cross-functional collaboration skills Benefits
- Bonus: Sales personnel are eligible for variable incentive pay dependent on their achievement of pre-established sales goals. Non-Sales roles are eligible for a company bonus plan, which is calculated as a percentage of eligible wages and dependent on company performance.
- Stock: This role is eligible to receive Restricted Stock Units (RSUs).
- Paid Time Off: earned time off, as well as paid company holidays based on region
- Paid Parental Leave: take up to six months off with your child after birth, adoption or foster care placement
- Full Health Benefits Plans: options for 100% employer paid and minimum employee contribution health plans from day one of employment
- Retirement Plans: select retirement and pension programs with potential for employer contributions
- Learning and Development: options for coaching, online courses and education reimbursements
- Compassionate Care Leave: paid time off following the loss of a loved one and other life-changing events Apply tot his job Apply To this Job
Apply tot his job Apply To this Job