Director of Software Engineering, DNS Engineering

Salesforce•Bellevue, WA

About The Position

Salesforce is hiring a Director of Software Engineering to lead DNS Engineering, which owns the DNS, DHCP, and IPAM services infrastructure supporting Salesforce products. The team operates authoritative and recursive DNS across Salesforce data centers and Hyperforce public cloud, self-service DNS and IPAM APIs, and DNS security capabilities such as DNSSEC and DDoS resilience. The director will set the multi-year technical strategy, own availability and live-site health for this Tier-0 service, and lead its evolution toward cloud-native, multi-provider DNS with automation and AI-assisted operations. The infrastructure includes BIND and dnsdist DNS fleets, AWS Route 53, GCP Cloud DNS, Kubernetes-native DNS automation, APIs that wrap commercial DDI platforms, security and resilience controls, and Infrastructure as Code and observability tooling. The director will lead tech leads, product owners, and senior engineers; partner with platform, networking, security, Hyperforce, and product teams; and represent DNS in architecture and planning forums. The role balances feature delivery, operational work, and technical debt while communicating progress, risks, and tradeoffs to senior leadership.

Requirements

12+ years of software engineering experience.
5+ years leading engineering teams, including at least 2 years managing managers.
Record of building and scaling diverse, high-performing infrastructure or platform teams and delivering complex, highly available production systems.
Deep understanding of DNS and core internet protocols, including DNSSEC, TCP/IP, HTTP, TLS, and load balancing, and how they behave at scale.
Experience owning Tier-0 or Tier-1 services in a 24x7x365, multi-datacenter environment, including on-call, incident management, and SLO-driven operations.
Hands-on background in distributed systems, Linux, and backend development; Python or Go preferred.
Sound judgment in system design, reliability, and operational risk.
Experience with public cloud (AWS, GCP, and/or Azure), containers and orchestration (Kubernetes, Docker), and Infrastructure as Code (Terraform, Puppet, or similar).
Experience driving engineering productivity with AI-assisted development tools and automation.
Strong communication skills and ability to influence senior stakeholders and peer organizations.
BS/MS in Computer Science or a related field, or equivalent practical experience.

Nice To Haves

Experience running authoritative and recursive DNS at internet scale using BIND, dnsdist, PowerDNS, Unbound, or similar, and with managed DNS services such as AWS Route 53.
Experience operating DDI/IPAM platforms such as Infoblox and building self-service APIs on top of them.
Experience leading large migrations from data centers to the cloud, or from one provider to many, for critical network infrastructure.
Background in DDoS mitigation, anycast, traffic engineering, or global traffic management.
Experience building agentic or ML-driven tools to detect, investigate, and fix operational problems.
Contributions to open source or IETF/DNS community standards work.

Responsibilities

Define the multi-year vision and roadmap for Salesforce DNS and DDI, and lead execution from architecture through delivery and operational excellence across first-party and public-cloud environments.
Hire, develop, and retain a diverse, high-performing organization of engineering managers and engineers; set goals, manage performance, remove obstacles, and develop technical leaders.
Own availability and trust for Tier-0 DNS, establish availability, latency, and change-safety SLOs, lead incident and problem management, run blameless postmortems, and drive corrective actions.
Modernize the platform toward cloud-native, multi-provider DNS on Hyperforce, including migrations, provider abstraction, Kubernetes integration, and retirement of legacy systems without disrupting customers.
Expand self-service DNS and IPAM APIs, policy-as-code, and automated validation; use AI-assisted development and agentic tools to reduce toil, identify risky changes, and accelerate investigations.
Strengthen DNS security and resilience, including DNSSEC, DDoS resilience, secure-by-default record management, protection against dangling records, and timely third-party software patching in partnership with Security.
Balance feature delivery, live-site work, operational load, and technical-debt reduction through clear, data-driven tradeoffs.
Represent DNS in architecture and planning forums; translate partner priorities into a ranked roadmap with measurable outcomes and resolve cross-team dependencies.
Report progress, risks, and tradeoffs to senior leadership and serve as the senior DNS escalation point during critical incidents.