Director of Software Engineering, DNS Engineering

Salesforce•San Francisco, CA

9d•$197,300 - $344,700

About The Position

Salesforce is hiring a Director of Software Engineering to lead DNS Engineering, the team responsible for DDI (DNS, DHCP, IPAM) services infrastructure supporting Salesforce products. The organization owns authoritative and recursive DNS across Salesforce data centers and Hyperforce public cloud, self-service DNS and IPAM APIs, and DNS security, including DNSSEC and DDoS resilience. The director will set the multi-year strategy, own availability for this Tier-0 service, and guide its evolution toward cloud-native, multi-provider DNS with automation and AI-assisted operations. The team operates mission-critical DNS systems on BIND and dnsdist; public cloud DNS on AWS Route 53 and GCP Cloud DNS; Kubernetes-native DNS automation; DDI platforms and APIs; security and resilience capabilities; and infrastructure automation and observability. The director leads engineering managers, technical leaders, product owners, and senior engineers, and partners with platform, networking, security, Hyperforce, and product teams. The role is accountable for technical direction, organizational development, service availability and live-site health, delivery, and cross-functional planning.

Requirements

12 or more years of software engineering experience.
At least 5 years leading engineering teams and at least 2 years managing managers.
A record of building and scaling diverse, high-performing infrastructure or platform teams and delivering complex, highly available production systems.
Deep understanding of DNS and core internet protocols, including DNS, DNSSEC, TCP/IP, HTTP, TLS, and load balancing, and their behavior at scale.
Experience owning Tier-0 or Tier-1 services in a 24x7x365, multi-datacenter environment, including on-call, incident management, and SLO-driven operations.
Hands-on experience with distributed systems, Linux, and backend development; Python or Go preferred.
Experience with public cloud (AWS, GCP, and/or Azure), containers and orchestration (Kubernetes, Docker), and Infrastructure as Code (Terraform, Puppet, or similar).
Experience driving engineering productivity with AI-assisted development tools and automation.
Strong communication skills and ability to influence senior stakeholders and peer organizations.
BS/MS in Computer Science or a related field, or equivalent practical experience.

Nice To Haves

Experience running authoritative and recursive DNS at internet scale using BIND, dnsdist, PowerDNS, Unbound, or similar, and with managed DNS services such as AWS Route 53.
Experience operating DDI/IPAM platforms such as Infoblox and building self-service APIs on top of them.
Experience leading large migrations from data centers to cloud, or from one provider to multiple providers, for critical network infrastructure.
Background in DDoS mitigation, anycast, traffic engineering, or global traffic management.
Experience building agentic or ML-driven tools to detect, investigate, and fix operational problems.
Contributions to open source or IETF/DNS community standards work.

Responsibilities

Define the multi-year vision and roadmap for Salesforce DNS and DDI, and own execution from architecture through delivery and operational excellence across first-party and public-cloud environments.
Hire, develop, and retain a diverse, high-performing organization of engineering managers and engineers; set goals, manage performance, remove obstacles, and develop technical leaders.
Own availability and trust for Tier-0 DNS infrastructure by setting availability, latency, and change-safety targets, leading incident and problem management, running blameless postmortems, and driving corrective actions.
Modernize the platform toward cloud-native, multi-provider DNS on Hyperforce, including migrations, provider abstraction, Kubernetes integration, and retirement of legacy systems without disrupting customers.
Expand self-service DNS and IPAM APIs, policy-as-code, and automated validation; use AI-assisted development and agentic tooling to reduce toil, identify risky changes, and speed investigations.
Strengthen security through DNSSEC, DDoS resilience, secure-by-default record management, dangling-record protection, and timely third-party software patching in partnership with Security.
Balance feature delivery, live-site work, operational load, and technical-debt reduction, making clear, data-driven tradeoffs.
Represent DNS in architecture and planning forums; translate partner-team priorities into a ranked roadmap with measurable outcomes and resolve cross-team dependencies.
Report progress, risks, and tradeoffs to senior leadership and serve as the senior DNS escalation point during critical incidents.