Salesforce DevOps Engineer

Compunnel, Inc.; Northern (KY); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Compunnel, Inc. is seeking an experienced Salesforce DevOps Engineer to own the CI/CD pipeline built on GitHub Actions and enforce DevOps best practices across multiple Salesforce orgs.

You will manage package-based deployments, environment promotion gates, and governance to ensure secure, scalable releases. Responsibilities include optimizing pipelines, maintaining DX project structure, and collaborating with architects to resolve inter-package dependencies.

Qualifications

• 6+ years of hands-on experience with GitHub Actions including workflow authoring, reusable actions, YAML, and secrets management.

Responsibilities

• Design, build, and maintain GitHub Actions workflows for automated Salesforce package deployments across TEST, LOAD, STAGING, EVOLVELOAD, and PROD.
• Implement multi-org deployment strategies using SFDX / SF CLI with module-based sequencing.
• Configure and enforce branch protection rules, environment secrets, required reviewers, and deployment gates.
• Optimize pipeline times via parallel jobs, dependency management, and package-version resolution.
• Own the Salesforce DX project structure including sfdx-project.json and package directories.
• Manage DX packages, versions, and installation order across target orgs.
• Enforce module-level code classification across packages and modules.
• Collaborate with Salesforce architects to resolve inter-package dependencies and version-pinning issues.
• Manage GitHub repositories, teams, and organization-level permissions.
• Configure and enforce CODEOWNERS, status checks, and merge strategies.
• Manage tokens, secrets, environment variables, and credentials with least privilege.
• Troubleshoot GitHub Actions failures, token resolutions, and environment access conflicts.
• Diagnose environment issues like metadata policies, API limits, and cross-repo permissions.
• Maintain audit trails of GitHub permissions and access reviews.

Skills

Troubleshooting

Automation

Release governance

Communication

Team collaboration

Scripting (YAML/Bash)

Education

Salesforce Certified Administrator or Platform Developer I

Tools

GitHub Actions

Salesforce DX (SFDX)

SF CLI

Terraform

Ansible

Docker

Python

Job description

Job Summary

We are seeking an experienced Salesforce DevOps Engineer to support the Salesforce Connected Project. This role will own the end-to-end CI/CD pipeline built on GitHub Actions, enforce DevOps best practices across multiple Salesforce organizations, and serve as the bridge between Salesforce development teams and platform engineering. The project uses a Salesforce DX package-based deployment model with module-level code classification. The role requires a proactive approach to platform health, quality engineering, automation, release governance, and prevention of issues before they reach higher environments.

Key Responsibilities

• Design, build, and maintain GitHub Actions workflows for automated Salesforce package deployments across TEST, LOAD, STAGING, EVOLVELOAD, and PROD environments.
• Implement multi-org deployment strategies using SFDX / SF CLI with package-based deployment sequencing aligned to module code classifications.
• Configure and enhance branch protection rules, environment secrets, required reviewers, and deployment gates aligned with Salesforce release governance.
• Optimize pipeline execution times through parallel job strategies, dependency management, and package-version resolution.
• Own the Salesforce DX project structure, including sfdx-project.json, package directory definitions, and configurations across modules.
• Manage DX packages and versioning, dependency graphs, and installation order across target organizations.
• Enforce and evolve module-level code classification strategies, ensuring metadata is mapped to the appropriate package, directory, and deployment path.
• Collaborate with Salesforce architects and developers to resolve inter-package dependencies, circular reference issues, and version-pinning conflicts.
• Manage GitHub repositories, teams, member access, and organization-level permissions.
• Configure and enforce branch protection rules, CODEOWNERS, required status checks, and merge strategies across repositories.
• Manage GitHub tokens, secrets, environment variables, and service account credentials using a least-privilege access model.
• Troubleshoot GitHub Actions failures, including workflow logic errors, runner environment issues, secret resolution failures, and organization-level access conflicts.
• Diagnose environment-level issues such as metadata policies, token expiration, API rate limits, and cross-repository permission errors.
• Maintain audit trails of GitHub permission changes and access reviews aligned with security and compliance requirements.
• Define, implement, and continuously improve quality gates across the environment promotion chain.
• Implement mandatory PR-level quality gates covering Apex static analysis, LWC linting, Salesforce Code Analyzer scans, minimum 80% code coverage, and metadata compliance.
• Design environment promotion gates that increase in strictness as code moves from TEST, LOAD, STAGING, EVOLVELOAD, and PROD.
• Analyze pipeline failures, deployment errors, and organization-level issues to identify recurring risks and implement automated prevention measures.
• Build pre-deployment validation workflows to identify package installation conflicts, dependency mismatches, and metadata incompatibilities before deployment.
• Implement organization health monitoring for Apex governor limit exposure, Metadata API usage, and deployment success rates.
• Maintain a Quality Gate Runbook documenting gates, validation criteria, pass/fail requirements, and escalation procedures.
• Collaborate with Salesforce developers and architects to promote quality and compliance earlier in the development lifecycle.
• Define and maintain Git branching strategies for multi-package and multi-module Salesforce projects.
• Maintain merge policies, pull request templates, CODEOWNERS assignments, and code review workflows.
• Govern release management and tagging practices for package versioning and traceability from commit to deployed package version.
• Establish pipeline observability dashboards covering quality gate trends, environment blockers, and recurring failure patterns.
• Implement proactive alerting for declining code coverage, static analysis violations, deployment-duration increases, and Salesforce API limit trends.
• Manage GitHub Actions runner infrastructure, including hosted and self-hosted runners, and monitor pipeline costs, utilization, and runner health.
• Produce deployment reports and release notes, including quality gate metrics for each release.
• Participate in project releases and Salesforce quarterly upgrade planning and coordinate environment-level validation testing.
• Use AI-powered code-assist tools such as GitHub Copilot, Cursor, or equivalent for GitHub Actions workflows, shell scripts, pipeline configurations, code review, and troubleshooting.
• Apply LLM-based tools to accelerate troubleshooting, develop deployment runbooks, generate test data scripts, and analyze pipeline failures.
• Explore and prototype agentic AI workflows for repetitive DevOps activities such as environment health checks, package dependency analysis, recurring-error analysis, and deployment reporting.
• Evaluate emerging GenAI tools relevant to Salesforce DevOps and recommend appropriate solutions.
• Apply responsible AI practices and ensure AI-generated output receives appropriate human review before use in pipelines or production environments.
• Complete an initial audit of GitHub organizations, repositories, teams, permissions, branch protections, and workflow configurations.
• Review Salesforce DX project structures, deployment methods, package definitions, and module-level classifications.
• Assess existing pipeline quality gates and identify advisory versus blocking controls and gaps.
• Shadow end-to-end package deployments and document pipeline gaps, access issues, quality failures, and dependency risks.
• Participate independently in sprint planning, refinement, demos, and development activities.
• Identify and implement improvements to pipeline methodologies to fully automate package installations across all project environments.
• Enhance hard-blocking PR quality gates for Apex coverage, PMD, ESLint, and metadata schema validation.
• Implement visible Apex coverage and static analysis pass/fail reporting within pull requests.
• Publish branching strategies, package versioning guidance, and GitHub governance documentation.
• Publish and maintain the Quality Gate Runbook with environment-specific enforcement levels and exception procedures.
• Implement escalating environment promotion gates and eliminate silent bypasses.
• Optimize package build and deployment pipelines to reduce execution time.
• Support quarterly Salesforce upgrade validation activities and present findings to delivery leadership.
• Demonstrate AI-assisted workflow improvements through pipelines, scripts, or runbooks.
• Ensure package installations flow through approved CI/CD pipelines with required quality gates.
• Prevent non-compliant code from advancing to LOAD or PROD.
• Proactively monitor pipeline and Salesforce platform health metrics and address warning trends before they become incidents.
• Maintain pipeline uptime and mean-time-to-recovery within agreed SLAs.
• Continuously evolve quality gates as the codebase and Salesforce platform grow.
• Identify and remediate GitHub platform issues, permission drift, and pipeline technical debt.
• Continuously introduce AI-assisted improvements for code generation, troubleshooting, and agentic task automation.
• Serve as the GitHub and Salesforce DevOps subject matter expert for pipeline, quality gate, and access-related issues.

Required Qualifications

• 6+ years of hands-on experience with GitHub Actions, including workflow authoring, reusable actions, composite actions, YAML/Shell scripting, and secrets management.
• Hands-on experience with Salesforce DX (SFDX / SF CLI), including sfdx-project.json configuration, package directory management, and SF CLI commands.
• Proven experience with Salesforce package-based deployments, including unlocked and/or org-dependent packages, versioning, dependency management, and installation sequencing.
• Understanding of module-level code classification within Salesforce DX and how metadata is organized, classified, and deployed across package or module boundaries.
• Familiarity with Salesforce release lifecycles, including Spring, Summer, and Winter releases and environment-level validation windows.
• Understanding of Apex, Lightning Web Components (LWC), and Flow metadata and how these components package and deploy.
• Experience designing and implementing multi-stage CI/CD quality gates across promotion pipelines.
• Experience embedding static analysis, code coverage enforcement, metadata validation, and security scanning as pipeline gates.
• Strong experience troubleshooting GitHub Actions failures, Salesforce deployment issues, token and secret resolution failures, runner issues, and environment access conflicts.
• Experience with infrastructure-as-code and environment configuration management using Terraform, Ansible, or equivalent technologies.
• Familiarity with Docker and self-hosted runner environments.
• Strong hands-on experience managing GitHub organizations, including repositories, teams, member roles, outside collaborators, and organization-level permission policies.
• Deep expertise configuring branch protection rules, required status checks, CODEOWNERS, and merge queue settings.
• Proficiency managing PATs, fine-grained tokens, GitHub Apps, environment secrets, and service account credentials using least-privilege principles.
• Experience diagnosing GitHub Actions environment issues, including runner configuration, rate limits, cross-repository access, and runner misconfiguration.
• Familiarity with GitHub audit logs, security alerts, and access review processes.
• Strong scripting skills using YAML, Bash/Shell, and/or Python for pipeline automation, package deployment orchestration, and GitHub API interactions.
• Experience working with JSON, XML, and YAML, including Salesforce metadata files, sfdx-project.json, and GitHub Actions workflows.
• Understanding of source deployments, diff deployments, and package deployments within the Salesforce ecosystem.
• Experience with Salesforce DX Git Delta or similar tools for diff-based deployments is preferred.
• Demonstrable experience using AI code-assist tools such as GitHub Copilot, Cursor, or equivalent in day-to-day engineering work.
• Working familiarity with large language models such as GPT, Claude, Gemini, or similar for debugging pipelines, generating scripts, documenting solutions, and troubleshooting.
• Awareness of agentic AI concepts and workflow automation and the ability to prototype simple agentic workflows.
• Ability to independently manage priorities and work effectively in a fast-paced delivery environment.
• Strong written and verbal communication skills and the ability to collaborate with Salesforce developers, architects, QA teams, and project leadership.

Preferred Qualifications

• Salesforce Certified Administrator or Platform Developer I certification.
• Experience with GitHub Actions for Salesforce DevOps, particularly package-based deployment models.
• Familiarity with Salesforce Administration, audit trails, and compliance-driven deployment practices.
• Experience supporting large-scale Salesforce implementations with multiple DX packages and complex inter-package dependency chains.
• Hands-on GitHub administration experience, including code scanning, secret scanning, and team access management.
• Experience building or deploying agentic AI workflows using LangChain, AutoGen, CrewAI, or similar frameworks.
• Familiarity with Salesforce Agentforce or AI integrations within the Salesforce platform.
• Experience with PMD, ESLint, Salesforce Code Analyzer, Apex code coverage validation, and metadata compliance checks.
• Experience with Terraform, Ansible, Docker, Bash, Python, and Salesforce CI/CD automation.
• Experience implementing pipeline observability, platform health monitoring, proactive alerting, and deployment analytics.
• Experience supporting Salesforce quarterly upgrades and complex enterprise release governance.