Lead Network Security Architect
About the position Responsibilities • Own Docusign's Network Security Strategy, defining the roadmap for network hardening, segmentation, and Zero Trust integration • Align strategy with enterprise objectives around customer trust, attack surface reduction, and data-driven decision-making • Evaluate new network security technologies (SASE, SSE, micro-segmentation, etc.) for enterprise adoption and ensure operationalization of technologies • Develop and maintain network security reference architectures, configuration baselines, and standards for on-prem, hybrid, and cloud environments • Partner with Network Engineering to ensure all network designs meet security standards pre-deployment • Drive consistent application of principles such as least privilege, secure routing, and network segmentation • Establish oversight processes for tracking adherence to standards, identifying deviations, and driving remediation accountability • Partner with Network Engineering amp; Operations teams to monitor posture metrics such as firewall hygiene, exposed ingress/egress, and segmentation health • Present posture insights and risk trends to the Technology and Security Leadership Teams and other company wide committees • Design and oversee data pipelines that consolidate inputs from various tools and network telemetry sources • Build and maintain network security dashboards that enable self-serve visibility for partner teams and security leadership • Partner with Exposure Management and Platform Security to integrate network data into enterprise-level dashboards • Use data analytics to identify systemic trends, quantify risk reduction, and inform prioritization decisions • Act as the bridge between Security Architecture, Network Operations, and Engineering, ensuring consistent alignment on priorities and controls • Lead alignment sessions to synchronize strategy, roadmaps, and metrics across Pamp;T Network and DTS Network • Provide expert consultation for major network initiatives, migrations, and design reviews Requirements • 12+ years of experience in network architecture, security architecture, or related roles in large-scale enterprise or cloud environments • Experience with network security technologies: firewalls/WAF, VPNs, SD-WAN, proxies, IDS/IPS, and routing protocols • Experience with cloud networking, segmentation, and hybrid connectivity models • Experience developing and governing enterprise network security standards and reference architectures • Experience with data modeling, dashboarding, or data visualization tools (e.g., Power BI, Tableau, or equivalent) • Experience with NIST CSF, CIS, and Zero Trust frameworks Nice-to-haves • Preferred certifications: CCIE Security, CCSP, CISSP, or equivalent experience • Experience mentoring or managing technical contributors • Exceptional communication, influence, and cross-functional collaboration skills Benefits • Bonus: Sales personnel are eligible for variable incentive pay dependent on their achievement of pre-established sales goals. Non-Sales roles are eligible for a company bonus plan, which is calculated as a percentage of eligible wages and dependent on company performance. • Stock: This role is eligible to receive Restricted Stock Units (RSUs). • Paid Time Off: earned time off, as well as paid company holidays based on region • Paid Parental Leave: take up to six months off with your child after birth, adoption or foster care placement • Full Health Benefits Plans: options for 100% employer paid and minimum employee contribution health plans from day one of employment • Retirement Plans: select retirement and pension programs with potential for employer contributions • Learning and Development: options for coaching, online courses and education reimbursements • Compassionate Care Leave: paid time off following the loss of a loved one and other life-changing events Apply tot his job