Docusign
Bringing Agreements to Life
Senior Technical Program Manager, Public Sector Security
Location
United States
Posted
5 days ago
Salary
Not specified
No structured requirement data.
Job Description
As the Senior Technical Program Manager, Public Sector Security, you will architect the strategic roadmap and oversee the delivery of Docusign’s most critical regulated environments. You aren't just checking boxes; you are building the framework that allows Docusign to serve the world’s most mission-critical government agencies.
Lead the strategy and end-to-end delivery for a portfolio of authorizations, including FedRAMP Moderate/High and DoD IL4/IL5.
Focus on the successful implementation and authorization of our IL5 environment.
Strategically mature our FedRAMP High posture and align our systems to CNSSI 1253 standards.
Define the multi-year security roadmap for US Public Sector expansion.
Align technical initiatives across NIST 800-53 and CNSSI 1253 controls to ensure a "build once, comply many" architecture.
Serve as the primary driver for our current-year goal of IL5 implementation, coordinating across Product, Engineering, Infrastructure, and Security to meet federal cloud SRG requirements.
Lead the full Assessment and Authorization (A&A) lifecycle.
Manage gap analyses, 3PAO engagements, and the path to Provisional Authorization (PA) and Agency ATOs.
Partner with Product and Engineering to translate complex federal mandates (FIPS 140-2/3, ICAM, Zero Trust) into actionable technical requirements.
Develop the readiness plan for FedRAMP High, identifying technical gaps and resource requirements to reach the high-water mark.
Act as the subject matter expert for leadership on the trade-offs between speed-to-market and the rigorous security requirements of IL5 and FedRAMP High.
Design and oversee the strategy for automated continuous monitoring and annual assessments to ensure zero drift in our authorized posture.
Job Requirements
- U.S. Citizen, U.S. National, or U.S. Person (individuals outside of these categories are generally barred from having logical access to IL5 data or infrastructure).
- 8+ years of experience in technical program management, with at least 5 years leading high-impact security or compliance programs (FedRAMP, DoD, or similar).
- Experience with the NIST 800-53 security control family and the Risk Management Framework (RMF).
- Proven track record of delivering at least one major authorization (e.g., FedRAMP Medium/High or DoD IL4/5) from readiness to ATO.
- Experience with cloud-native architecture, identity management (ICAM), and encryption standards.
- Direct experience with CNSSI 1253 and federal cloud SRG requirements.
- Active Secret or Top Secret clearance.
- Experience with GovCloud or air-gapped environments.
- Professional certifications: CISSP, CISM, or AWS/Azure/GCP Security Specialty.
- Master’s degree in Computer Science, Engineering, Cybersecurity, or a related technical field.
Benefits
- Paid Time Off: earned time off, as well as paid company holidays based on region.
- Paid Parental Leave: take up to six months off with your child after birth, adoption or foster care placement.
- Full Health Benefits Plans: options for 100% employer paid and minimum employee contribution health plans from day one of employment.
- Retirement Plans: select retirement and pension programs with potential for employer contributions.
- Learning and Development: options for coaching, online courses and education reimbursements.
- Compassionate Care Leave: paid time off following the loss of a loved one and other life-changing events.