Senior Principal Software Engineer

Job Description

This is your opportunity to apply formal specification and verification to real‑world cloud‑scale distributed systems, as part of an engineering organization that highly values formal methods. OCI has been using formal methods—primarily TLA+, as well as some others—since we started in 2014. Oracle is a founding premier member of the TLA+ Foundation industry‑standards body, and OCI employees are very active in the TLA+ community.

We are expanding our in‑house formal verification team to handle major new development initiatives. OCI is building our next generation of core data‑planes and cloud automation, for which correctness and reliability are critical. We know that achieving those properties requires use of formal methods. Our formal verification team assists development teams across all of OCI, so the role has high visibility and impact.

We are looking for self‑motivated engineers with passion and expertise for practical application of formal methods to complex problems. You should value collaboration, innovation, pragmatism, and be focused on achieving results.

Responsibilities

We use formal specification and verification methods to help developers of complex systems find very subtle bugs that are unlikely to be caught by normal testing techniques. We focus on preventing the kinds of bugs that would cause the most severe problems for our customers, in particular data loss/corruption or security vulnerabilities.

We achieve this via the following activities:

• Help engineers to state their requirements and algorithms much more precisely than conventional design docs. This typically uncovers many ambiguities and invalid assumptions – i.e. design bugs.
• Provide additional ways to describe and think about requirements and design. This change in perspective can itself reveal problems.
• Review critical sections of code, to reverse‑engineer the higher‑level algorithm or design that has been implemented. This ‘recovered design’ can then be formally verified to satisfy its intended properties.
• Use tools such as model‑checkers, constraint solvers, and increasingly (due to rapid progress with AI) machine‑checked proof, in order to check a precise design against precise correctness properties.

Additionally, we are helping to create new methodologies and tools to enable safe and productive use of Generative AI for designing, implementing, and testing mission‑critical components and services. For example:

• Automatically generate formal specifications from informal descriptions to remove ambiguity. Then validate that those specifications accurately capture the intent of the author – i.e. that the resulting formal specifications allow behaviors that are desired, while disallowing all behaviors that should be prohibited.
• Automatically generate implementation code from a formal specification, and then validate that the generated code satisfies the specification, e.g. via trace‑validation/conformance testing, or by using code‑level verification systems such as Verus, or by other techniques that you find or invent.
• Automatically reverse‑engineer a formal specification from code, at an appropriate level of abstraction such that the extracted specification can then be verified against high‑level correctness properties.
• Using AI to find inductive invariants and write mechanically checked proofs.

Additional Abilities That Are Highly Valued

• Strong knowledge of database programming models (SQL and NoSQL), and database internals.
• Experience working with geographically distributed teams via Slack and online meetings.
• Knowledge of Computer Networking (OSI layers, DNS, TCP/IP, DHCP, Routers, Gateways, Subnets, etc.).
• Knowledge of Linux internals and troubleshooting skills.
• Knowledge of compute virtualization technologies (hypervisors, QEMU, containers, etc.).

Qualifications

MS degree or higher in Computer Science, involving a significant amount of formal specification and verification.

5+ years of full‑time professional software development of concurrent and distributed systems, ideally cloud services.

Ability to write correct high‑performance concurrent code in at least one of C/C++, Java, GoLang, or Rust.

Deep knowledge of standard distributed algorithms used in cloud dataplanes, e.g. Paxos, Raft, Viewstamped Replication, leases, methods of concurrency control, storage systems, and transaction systems.

Skilled in reading informal requirements, system designs, and code. Skilled in identifying the most critical and complex/subtle parts, and writing formal specifications for those parts at a level of abstraction appropriate for verifying correctness of the system.

Skilled in specifying safety and liveness using TLA+ on real‑world problems, i.e. applying abstraction. Knowledge and experience of other specification methods and tools is also highly valued.

Skilled in verifying safety and liveness using model checkers such as TLC and Apalache.

Ideally, skilled at applying mechanical proof tools such as TLAPS, with associated experience of finding inductive invariants for concurrent algorithms.

Excellent at collaborating with software engineers to help verify correctness of their work. This requires strong interpersonal and communication skills.

Good at communicating complex technical ideas verbally and in writing, to engineers, managers, and executives.

Disclaimer

Certain U.S. based or U.S. customer or client‑facing roles may be required to comply with applicable requirements, such as immunization/occupational health mandates, and/or drug testing requirements.

Range and Benefit Information

US: Hiring Range in USD from: $135,200 - $306,400 per year. May be eligible for bonus, equity, and compensation deferral.

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.

Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

Benefits

• Medical, dental, and vision insurance, including expert medical opinion
• Short term disability and long term disability
• Life insurance and AD&D
• Supplemental life insurance (Employee/Spouse/Child)
• Health care and dependent care Flexible Spending Accounts
• Pre‑tax commuter and parking benefits
• 401(k) Savings and Investment Plan with company match
• Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non‑overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
• 11 paid holidays
• Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
• Paid parental leave
• Adoption assistance
• Employee Stock Purchase Plan
• Financial planning and group legal
• Voluntary benefits including auto, homeowner and pet insurance

Career Level - IC5

The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.

Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.