Principal Software Engineer, Full Stack

Salesforce•San Francisco, CA

4d•$197,300 - $344,700

About The Position

We are seeking a highly skilled Full Stack Software Engineer to enhance the development experience for UI and Java developers in an AI First development (ADLC) organization in the Technology & Product organization at Salesforce. In this role, you will be a dynamic, innovative engineer and as such you will design, develop products and services that enable Salesforce developers to deiver workflows in remote development environments. You will collaborate closely with cross-functional teams, work and contribute to open source, investigate/explore/GTM new AI solutions to deliver efficiency, reliability and 10x productivity to Tech & Product developers.

Requirements

UI and Java developers
AI First development (ADLC) organization
design, develop products and services that enable Salesforce developers to deiver workflows in remote development environments
collaborate closely with cross-functional teams
work and contribute to open source
investigate/explore/GTM new AI solutions to deliver efficiency, reliability and 10x productivity to Tech & Product developers
Nix-based devcontainer base image
user home directory persistence
lifecycle service management via s6-overlay
automated rebuild and rollback mechanisms
devcontainer features (Agentforce, OrgFarm, CoreApp settings, Git clone, etc.)
devcontainer feature backbone framework
established "blessed" feature standards
Gold Standard Workspaces initiative
Bazel build infrastructure
Remote Build Execution (RBE) integration with BuildFarm
disk and cache tuning
multi-codeline build performance
build performance analysis
Bazel plugin stability for IntelliJ
sfw-controlplane-api service
workspace provisioning pipelines
Temporal workflow and schedule management
DynamoDB table provisioning
snapshot lifecycle management
Hyperforce/Falcon deployments
Single Schema / Single Config initiative
workspace configuration into a single devcontainer schema
workspace image supply chain security
OCI base images to Trusted Image Central (TIC)
Renovate for automated dependency updates
security CARs and PRBs
SFCI builds for Nix-dependent repositories
mirroring public Nix packages into Nexus/Artifactory
migrating EBS snapshot creation off EC2 instances onto scheduled Jenkins jobs
security compliance for the Workspaces fleet
configuration drift
security SLAs
deactivated-user workspace shutdowns
corrective actions arising from security reviews
Workspaces observability
dashboards and telemetry in Honeycomb
migration to Monitoring Cloud/AutoTelemetry
workspace creation failures
rebuild error rates
vault reliability signals
AI-powered diagnostic tooling
Workspaces Diagnostic Agent
fleet health checks
on-call MTTR
reusable skills to the CDW Marketplace
rotating support hero schedule
Sev3 and above incidents
snapshot failures
workspace creation issues
IDE connectivity (IntelliJ, VS Code, Cursor)
disk/RBE problems
internal developer documentation
workspace setup
sfworkctl
disk management
developer tooling onboarding
CBX/Bazel, SFCI, JetBrains, OrgFarm, Temporal, and Falcon/Hyperforce platform teams
technical design documents and 1-pagers
deep-dive sessions
V2MOM measure execution
sprint planning and Kanban backlog replenishment

Responsibilities

Design, build, and maintain the Salesforce Workspaces devcontainer base image (Nix-based), encompassing user home directory persistence, lifecycle service management via s6-overlay, and automated rebuild and rollback mechanisms
Develop and own devcontainer features (Agentforce, OrgFarm, CoreApp settings, Git clone, etc.) in accordance with the devcontainer feature backbone framework and established "blessed" feature standards
Lead the Gold Standard Workspaces initiative — defining, enforcing, and continuously improving criteria for healthy, reproducible, and supportable workspace environments, including feature versioning, pinning, and compliance validation
Own and optimize Bazel build infrastructure for Salesforce Workspaces, including Remote Build Execution (RBE) integration with BuildFarm, disk and cache tuning, and multi-codeline build performance
Conduct in-depth build performance analysis — profiling critical path bottlenecks, RBE worker failures, cache hit ratios, and memory and page-cache behavior — and implement targeted solutions
Collaborate with JetBrains (external vendor) and internal CBX/Bazel teams on BSP/Bazel plugin stability for IntelliJ, including diagnosis of mapping failures, logging issues, and RBE action input failures
Develop and maintain the sfw-controlplane-api service, including workspace provisioning pipelines, Temporal workflow and schedule management, DynamoDB table provisioning, snapshot lifecycle management, and Hyperforce/Falcon deployments
Implement the Single Schema / Single Config initiative — unifying workspace configuration into a single devcontainer schema that supports multiple features with minimal developer setup overhead
Drive workspace image supply chain security: migrate OCI base images to Trusted Image Central (TIC), enable Renovate for automated dependency updates, and manage associated security CARs and PRBs
Enable SFCI builds for Nix-dependent repositories by mirroring public Nix packages into Nexus/Artifactory and migrating EBS snapshot creation off EC2 instances onto scheduled Jenkins jobs
Maintain security compliance for the Workspaces fleet — eliminating configuration drift, enforcing security SLAs, managing deactivated-user workspace shutdowns, and owning corrective actions arising from security reviews
Own and evolve Workspaces observability by building dashboards and telemetry in Honeycomb and driving migration to Monitoring Cloud/AutoTelemetry; analyze workspace creation failures, rebuild error rates, and vault reliability signals
Build AI-powered diagnostic tooling (e.g., a Workspaces Diagnostic Agent) to automate fleet health checks, reduce on-call MTTR, and contribute reusable skills to the CDW Marketplace
Participate in a rotating support hero schedule — triaging and resolving Sev3 and above incidents involving snapshot failures, workspace creation issues, IDE connectivity (IntelliJ, VS Code, Cursor), and disk/RBE problems
Maintain and improve internal developer documentation covering workspace setup, sfworkctl, disk management, and developer tooling onboarding
Partner with CBX/Bazel, SFCI, JetBrains, OrgFarm, Temporal, and Falcon/Hyperforce platform teams to unblock and deliver workspace platform improvements
Author technical design documents and 1-pagers, lead deep-dive sessions, drive V2MOM measure execution, and contribute to sprint planning and Kanban backlog replenishment