Senior Manager of Software Engineering, DNS Engineering

Salesforce; Washington; On-site; USD 180,000 - 250,000; Full time

Job summary

Salesforce is seeking a Senior Manager of Software Engineering to lead DNS Engineering, responsible for authoritative and recursive DNS, DDI platforms, and DNS security across Salesforce data centers and Hyperforce. The role requires 12+ years in software engineering, 5+ years of leadership, and deep DNS expertise.

You'll set multi‑year strategy, own availability and live-site health, and guide cloud-native migrations with automation and AI-assisted operations across first‑party and public-cloud

Qualifications

• 12+ years in software engineering
• 5+ years leading teams
• deep experience with DNS and large-scale distributed systems

Responsibilities

• Set strategy and own delivery for Salesforce DNS and DDI
• Lead and grow the organization, hiring and developing engineers
• Own availability, SLOs, incident and problem management
• Modernize the platform toward cloud-native, multi-provider DNS
• Automate via AI and self-service, grow DNS/IPAM APIs
• Strengthen security posture (DNSSEC, DDoS resilience)
• Balance the portfolio with feature delivery and reliability

Skills

DNS engineering

Distributed systems

Leadership

Cloud-native

DNS security

Tools

BIND

dnsdist

AWS Route 53

GCP Cloud DNS

Kubernetes

Puppet

Terraform

Spinnaker

Job description

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Enterprise Technology & Infrastructure

Job Details

About SalesforceSalesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.Ready to level-up your career at the company leading workforce transformation in the agentic era? You're in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

The Experience

Salesforce is hiring a Senior Manager of Software Engineering to lead DNS Engineering, the team that owns the DDI (DNS, DHCP, IPAM) services infrastructure behind every Salesforce product. You'll lead a team of engineers responsible for authoritative and recursive DNS across Salesforce data centers and Hyperforce public cloud, self-service DNS and IPAM APIs, and DNS security, including DNSSEC and DDoS resilience. You'll set the multi-year strategy, own availability for this Tier-0 service, and lead the move to cloud-native, multi-provider DNS with automation and AI-assisted operations. The role suits a leader with 12+ years in software engineering, 5+ years leading teams, and deep experience with DNS and large-scale distributed systems.

Every customer request to Salesforce starts with a DNS lookup. The DNS Engineering team owns this layer for Salesforce: the authoritative and service‑discovery DNS that sits in front of every Salesforce product, in our first‑party data centers and across Hyperforce on the public cloud. We also own the DDI (DNS, DHCP, IPAM) platform and the self‑service APIs that engineers and automated pipelines use to manage records, zones, and IP space every day.

The team’s work spans large, mission‑critical systems:

• Authoritative and recursive DNS on BIND and dnsdist, running on fleets across many data centers and serving very high query volumes with strict latency and availability targets (3 & 4 nines).
• Public cloud DNS on AWS Route 53 and GCP Cloud DNS, plus Kubernetes-native DNS automation (external-dns) for Hyperforce workloads
• DDI platform and APIs: services that wrap commercial DDI platforms (such as Infoblox) so record and IPAM changes are safe, validated, and auditable
• Security and resilience: DNSSEC, DDoS protection, hardening against dangling records and subdomain takeover, and multi-provider failover
• Infrastructure as Code and automation: Puppet, Terraform, Spinnaker, and CI/CD pipelines with staggered, datacenter‑by‑datacenter rollouts, plus observability through Splunk, Grafana, and Argus
• Third‑Party DNS vendor relations: Our DNS infrastructure uses third‑party DNS vendors to manage DNS zones on misc commercial enterprise DNS platforms.

As Senior Manager of Software Engineering for DNS Engineering, you'll lead the organization that keeps this layer fast, secure, and always available. You'll set its technical direction toward a cloud‑native, highly automated, AI‑assisted future. You'll lead tech leads, POs and senior engineers. You'll be accountable for availability and live‑site health. And you'll partner with the platform, networking, security, and product teams that depend on DNS.

What You’ll Actually Be Doing

Set strategy and own delivery. Define the multi‑year vision and roadmap for Salesforce DNS and DDI, and own execution from architecture through delivery to operational excellence across first‑party and public‑cloud environments.

Lead and grow the organization. Hire, develop, and keep a diverse, high‑performing team of engineers. Set clear goals, manage performance, remove obstacles, and develop the next generation of technical leaders.

Own availability and trust. Treat DNS as Tier‑0 infrastructure. Set availability, latency, and change‑safety targets (SLOs), lead the incident and problem‑management process, run blameless postmortems, and drive the fixes that keep the same incident from happening twice.

Modernize the platform. Lead the move toward cloud‑native, multi‑provider DNS on Hyperforce, including migrations, provider abstraction, Kubernetes integration, and retiring legacy systems, without disrupting customers.

Automate through AI and self‑service. Grow self‑service DNS and IPAM APIs, policy‑as‑code, and automated validation. Use AI‑assisted development and agentic tooling to cut toil, catch risky changes before they ship, and speed up investigations.

Strengthen security posture. Champion DNSSEC, DDoS resilience, secure‑by‑default record management, protection against dangling records, and timely patching of third‑party software, in partnership with Security.

Balance the portfolio. Weigh feature delivery, live