Salesforce DevOps Engineer

Job Summary
We are seeking an experienced Salesforce DevOps Engineer to support the Salesforce Connected Project. This role will own the end-to-end CI/CD pipeline built on GitHub Actions, enforce DevOps best practices across multiple Salesforce organizations, and serve as the bridge between Salesforce development teams and platform engineering. The project uses a Salesforce DX package-based deployment model with module-level code classification. The role requires a proactive approach to platform health, quality engineering, automation, release governance, and prevention of issues before they reach higher environments.


Key Responsibilities
• Design, build, and maintain GitHub Actions workflows for automated Salesforce package deployments across TEST, LOAD, STAGING, EVOLVELOAD, and PROD environments.
• Implement multi-org deployment strategies using SFDX / SF CLI with package-based deployment sequencing aligned to module code classifications.
• Configure and enhance branch protection rules, environment secrets, required reviewers, and deployment gates aligned with Salesforce release governance.
• Optimize pipeline execution times through parallel job strategies, dependency management, and package-version resolution.
• Own the Salesforce DX project structure, including sfdx-project.json, package directory definitions, and configurations across modules.
• Manage DX packages and versioning, dependency graphs, and installation order across target organizations.
• Enforce and evolve module-level code classification strategies, ensuring metadata is mapped to the appropriate package, directory, and deployment path.
• Collaborate with Salesforce architects and developers to resolve inter-package dependencies, circular reference issues, and version-pinning conflicts.
• Manage GitHub repositories, teams, member access, and organization-level permissions.
• Configure and enforce branch protection rules, CODEOWNERS, required status checks, and merge strategies across repositories.
• Manage GitHub tokens, secrets, environment variables, and service account credentials using a least-privilege access model.
• Troubleshoot GitHub Actions failures, including workflow logic errors, runner environment issues, secret resolution failures, and organization-level access conflicts.
• Diagnose environment-level issues such as metadata policies, token expiration, API rate limits, and cross-repository permission errors.
• Maintain audit trails of GitHub permission changes and access reviews aligned with security and compliance requirements.
• Define, implement, and continuously improve quality gates across the environment promotion chain.
• Implement mandatory PR-level quality gates covering Apex static analysis, LWC linting, Salesforce Code Analyzer scans, minimum 80% code coverage, and metadata compliance.
• Design environment promotion gates that increase in strictness as code moves from TEST, LOAD, STAGING, EVOLVELOAD, and PROD.
• Analyze pipeline failures, deployment errors, and organization-level issues to identify recurring risks and implement automated prevention measures.
• Build pre-deployment validation workflows to identify package installation conflicts, dependency mismatches, and metadata incompatibilities before deployment.
• Implement organization health monitoring for Apex governor limit exposure, Metadata API usage, and deployment success rates.
• Maintain a Quality Gate Runbook documenting gates, validation criteria, pass/fail requirements, and escalation procedures.
• Collaborate with Salesforce developers and architects to promote quality and compliance earlier in the development lifecycle.
• Define and maintain Git branching strategies for multi-package and multi-module Salesforce projects.
• Maintain merge policies, pull request templates, CODEOWNERS assignments, and code review workflows.
• Govern release management and tagging practices for package versioning and traceability from commit to deployed package version.
• Establish pipeline observability dashboards covering quality gate trends, environment blockers, and recurring failure patterns.
• Implement proactive alerting for declining code coverage, static analysis violations, deployment-duration increases, and Salesforce API limit trends.
• Manage GitHub Actions runner infrastructure, including hosted and self-hosted runners, and monitor pipeline costs, utilization, and runner health.
• Produce deployment reports and release notes, including quality gate metrics for each release.
• Participate in project releases and Salesforce quarterly upgrade planning and coordinate environment-level validation testing.
• Use AI-powered code-assist tools such as GitHub Copilot, Cursor, or equivalent for GitHub Actions workflows, shell scripts, pipeline configurations, code review, and troubleshooting.
• Apply LLM-based tools to accelerate troubleshooting, develop deployment runbooks, generate test data scripts, and analyze pipeline failures.
• Explore and prototype agentic AI workflows for repetitive DevOps activities such as environment health checks, package dependency analysis, recurring-error analysis, and deployment reporting.
• Evaluate emerging GenAI tools relevant to Salesforce DevOps and recommend appropriate solutions.
• Apply responsible AI practices and ensure AI-generated output receives appropriate human review before use in pipelines or production environments.
• Complete an initial audit of GitHub organizations, repositories, teams, permissions, branch protections, and workflow configurations.
• Review Salesforce DX project structures, deployment methods, package definitions, and module-level classifications.
• Assess existing pipeline quality gates and identify advisory versus blocking controls and gaps.
• Shadow end-to-end package deployments and document pipeline gaps, access issues, quality failures, and dependency risks.
• Participate independently in sprint planning, refinement, demos, and development activities.
• Identify and implement improvements to pipeline methodologies to fully automate package installations across all project environments.
• Enhance hard-blocking PR quality gates for Apex coverage, PMD, ESLint, and metadata schema validation.
• Implement visible Apex coverage and static analysis pass/fail reporting within pull requests.
• Publish branching strategies, package versioning guidance, and GitHub governance documentation.
• Publish and maintain the Quality Gate Runbook with environment-specific enforcement levels and exception procedures.
• Implement escalating environment promotion gates and eliminate silent bypasses.
• Optimize package build and deployment pipelines to reduce execution time.
• Support quarterly Salesforce upgrade validation activities and present findings to delivery leadership.
• Demonstrate AI-assisted workflow improvements through pipelines, scripts, or runbooks.
• Ensure package installations flow through approved CI/CD pipelines with required quality gates.
• Prevent non-compliant code from advancing to LOAD or PROD.
• Proactively monitor pipeline and Salesforce platform health metrics and address warning trends before they become incidents.
• Maintain pipeline uptime and mean-time-to-recovery within agreed SLAs.
• Continuously evolve quality gates as the codebase and Salesforce platform grow.
• Identify and remediate GitHub platform issues, permission drift, and pipeline technical debt.
• Continuously introduce AI-assisted improvements for code generation, troubleshooting, and agentic task automation.
• Serve as the GitHub and Salesforce DevOps subject matter expert for pipeline, quality gate, and access-related issues.


Required Qualifications
• 6+ years of hands-on experience with GitHub Actions, including workflow authoring, reusable actions, composite actions, YAML/Shell scripting, and secrets management.
• Hands-on experience with Salesforce DX (SFDX / SF CLI), including sfdx-project.json configuration, package directory management, and SF CLI commands.
• Proven experience with Salesforce package-based deployments, including unlocked and/or org-dependent packages, versioning, dependency management, and installation sequencing.
• Understanding of module-level code classification within Salesforce DX and how metadata is organized, classified, and deployed across package or module boundaries.
• Familiarity with Salesforce release lifecycles, including Spring, Summer, and Winter releases and environment-level validation windows.
• Understanding of Apex, Lightning Web Components (LWC), and Flow metadata and how these components package and deploy.
• Experience designing and implementing multi-stage CI/CD quality gates across promotion pipelines.
• Experience embedding static analysis, code coverage enforcement, metadata validation, and security scanning as pipeline gates.
• Strong experience troubleshooting GitHub Actions failures, Salesforce deployment issues, token and secret resolution failures, runner issues, and environment access conflicts.
• Experience with infrastructure-as-code and environment configuration management using Terraform, Ansible, or equivalent technologies.
• Familiarity with Docker and self-hosted runner environments.
• Strong hands-on experience managing GitHub organizations, including repositories, teams, member roles, outside collaborators, and organization-level permission policies.
• Deep expertise configuring branch protection rules, required status checks, CODEOWNERS, and merge queue settings.
• Proficiency managing PATs, fine-grained tokens, GitHub Apps, environment secrets, and service account credentials using least-privilege principles.
• Experience diagnosing GitHub Actions environment issues, including runner configuration, rate limits, cross-repository access, and runner misconfiguration.
• Familiarity with GitHub audit logs, security alerts, and access review processes.
• Strong scripting skills using YAML, Bash/Shell, and/or Python for pipeline automation, package deployment orchestration, and GitHub API interactions.
• Experience working with JSON, XML, and YAML, including Salesforce metadata files, sfdx-project.json, and GitHub Actions workflows.
• Understanding of source deployments, diff deployments, and package deployments within the Salesforce ecosystem.
• Experience with Salesforce DX Git Delta or similar tools for diff-based deployments is preferred.
• Demonstrable experience using AI code-assist tools such as GitHub Copilot, Cursor, or equivalent in day-to-day engineering work.
• Working familiarity with large language models such as GPT, Claude, Gemini, or similar for debugging pipelines, generating scripts, documenting solutions, and troubleshooting.
• Awareness of agentic AI concepts and workflow automation and the ability to prototype simple agentic workflows.
• Ability to independently manage priorities and work effectively in a fast-paced delivery environment.
• Strong written and verbal communication skills and the ability to collaborate with Salesforce developers, architects, QA teams, and project leadership.


Preferred Qualifications
• Salesforce Certified Administrator or Platform Developer I certification.
• Experience with GitHub Actions for Salesforce DevOps, particularly package-based deployment models.
• Familiarity with Salesforce Administration, audit trails, and compliance-driven deployment practices.
• Experience supporting large-scale Salesforce implementations with multiple DX packages and complex inter-package dependency chains.
• Hands-on GitHub administration experience, including code scanning, secret scanning, and team access management.
• Experience building or deploying agentic AI workflows using LangChain, AutoGen, CrewAI, or similar frameworks.
• Familiarity with Salesforce Agentforce or AI integrations within the Salesforce platform.
• Experience with PMD, ESLint, Salesforce Code Analyzer, Apex code coverage validation, and metadata compliance checks.
• Experience with Terraform, Ansible, Docker, Bash, Python, and Salesforce CI/CD automation.
• Experience implementing pipeline observability, platform health monitoring, proactive alerting, and deployment analytics.
• Experience supporting Salesforce quarterly upgrades and complex enterprise release governance.