Principal Software Engineer, Full Stack

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Software Engineering

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

Role Overview:
We are seeking a highly skilled Full Stack Software Engineer to enhance the development experience for UI and Java developers in an AI First development (ADLC)  organization in the Technology & Product organization at Salesforce. In this role, you will be a dynamic, innovative engineer and as such you will design, develop products and services that enable Salesforce developers to deiver workflows in remote development environments. You will collaborate closely with cross-functional teams, work and contribute to open source, investigate/explore/GTM new AI solutions to deliver efficiency, reliability and 10x productivity to Tech & Product developers.

Key Responsibilities

Developer Environment Platform

• Design, build, and maintain the Salesforce Workspaces devcontainer base image (Nix-based), encompassing user home directory persistence, lifecycle service management via s6-overlay, and automated rebuild and rollback mechanisms

• Develop and own devcontainer features (Agentforce, OrgFarm, CoreApp settings, Git clone, etc.) in accordance with the devcontainer feature backbone framework and established "blessed" feature standards

• Lead the Gold Standard Workspaces initiative — defining, enforcing, and continuously improving criteria for healthy, reproducible, and supportable workspace environments, including feature versioning, pinning, and compliance validation

Build Systems & Remote Build Execution

• Own and optimize Bazel build infrastructure for Salesforce Workspaces, including Remote Build Execution (RBE) integration with BuildFarm, disk and cache tuning, and multi-codeline build performance

• Conduct in-depth build performance analysis — profiling critical path bottlenecks, RBE worker failures, cache hit ratios, and memory and page-cache behavior — and implement targeted solutions

• Collaborate with JetBrains (external vendor) and internal CBX/Bazel teams on BSP/Bazel plugin stability for IntelliJ, including diagnosis of mapping failures, logging issues, and RBE action input failures

 

Control Plane & Backend Services

•  Develop and maintain the sfw-controlplane-api service, including workspace provisioning pipelines, Temporal workflow and schedule management, DynamoDB table provisioning, snapshot lifecycle management, and Hyperforce/Falcon deployments

• Implement the Single Schema / Single Config initiative — unifying workspace configuration into a single devcontainer schema that supports multiple features with minimal developer setup overhead 

 

Security, Compliance & Supply Chain

• Drive workspace image supply chain security: migrate OCI base images to Trusted Image Central (TIC), enable Renovate for automated dependency updates, and manage associated security CARs and PRBs

• Enable SFCI builds for Nix-dependent repositories by mirroring public Nix packages into Nexus/Artifactory and migrating EBS snapshot creation off EC2 instances onto scheduled Jenkins jobs

• Maintain security compliance for the Workspaces fleet — eliminating configuration drift, enforcing security SLAs, managing deactivated-user workspace shutdowns, and owning corrective actions arising from security reviews

 

Observability & Reliability

• Own and evolve Workspaces observability by building dashboards and telemetry in Honeycomb and driving migration to Monitoring Cloud/AutoTelemetry; analyze workspace creation failures, rebuild error rates, and vault reliability signals<