Salesforce DevSecOps Program Manager

As required by our governmental client, this position requires being a US Citizen AND an active DHS Public Trust Clearance or the ability to obtain this clearance

HESFP LLC a Cherokee Federal owned company is seeking an experienced DevSecOps Program Manager with deep expertise in Harness.io to support enterprise DevSecOps initiatives. This role focuses on driving automation, standardization, and secure delivery across the Salesforce and enterprise development lifecycle. You will lead CI/CD strategy, optimize deployment pipelines, and ensure scalable, compliant DevSecOps practices across environments.

Compensation & Benefits:

Estimated Starting Salary Range for Salesforce DevSecOps Program Manager: $165-185k

Pay commensurate with experience.

Full time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided.  Benefits are subject to change with or without notice.

Salesforce DevSecOps Program Manager Responsibilities Include: 

Harness.io Platform Development and Maintenance

• Design, build, and maintain CI/CD pipelines in Harness.io for Salesforce metadata deployments across multiple sandbox and production environments.

• Develop and maintain Python-based orchestration and business logic layers that extend Harness.io native capabilities.

• Author and maintain pipeline YAML configurations, templates, and reusable pipeline components following a three-layer architecture (pipeline, orchestration, business logic).

• Build and maintain custom tooling including delta deployment generation, environment drift detection, backup and restore utilities, and structured reporting.

• Manage container images, artifact repositories, and pipeline infrastructure dependencies.

• Implement and maintain integrations with notification systems, work item tracking platforms, and source control connectors.

• Troubleshoot pipeline failures, environment connectivity issues, and deployment errors using a fail-fast diagnostic approach.

Salesforce Release Management and Support

• Serve as the primary point of contact for deployment triage, diagnosing and resolving release failures across feature, release, hotfix, and back-promotion pipelines.

• Manage the end-to-end release lifecycle including release branch creation, work item assembly, manifest generation, validation, and production deployment.

• Coordinate with developers, administrators, and release managers to ensure smooth promotion of metadata through the environment progression from development through production.

• Maintain and enforce the established branching strategy including feature branches, promotion branches, release branches, hotfix branches, and environment branches.

• Provision, configure, and manage Salesforce sandbox environments to support the software development lifecycle.

• Provide operational support and guidance to multiple development teams spanning development, QA, and release management functions.

DevSecOps Roadmap and Innovation

• Define and execute the DevSecOps roadmap, identifying opportunities to improve deployment speed, reliability, and developer experience.

• Evaluate, pilot, and integrate new tools and capabilities into the platform such as code quality gates, security scanning, and automated test frameworks.

• Drive continuous improvement of deployment processes including delta deployment optimization, environment refresh automation, and drift remediation workflows.

• Establish and maintain comprehensive documentation including platform architecture guides, standard operating procedures, runbooks, and onboarding materials.

• Collaborate with cross-functional stakeholders to align DevSecOps practices with organizational goals and compliance requirements.

• Stay current with Harness.io platform capabilities, Salesforce CLI updates, and industry DevSecOps best practices to inform platform evolution.

• Mentor team members on DevSecOps practices, branching strategy, and secure development workflows.

• Performs other job-related duties as assigned.

Salesforce DevSecOps Program Manager Experience, Education, Skills, Abilities requested: 

• Bachelor’s degree in Computer Science, Information Technology, or a related field.

• Minimum of eleven (11) years of general work experience.

• Experience managing DevSecOps environments and deployments for low-code/no-code Salesforce platforms.

• Familiarity with Salesforce sandbox and production environments and metadata configurations.

• Minimum three (3) years’ experience using declarative Salesforce deployment tools, including change sets, unmanaged packages, or Workbench/Ant Migration Tool.

• Minimum three (3) years’ experience using DevSecOps tools such as Harness.io, Copado, Flosum, or Jenkins.

• Proficiency in designing, building, and maintaining Harness.io CI/CD pipelines including YAML authoring, template development, and platform administration.

• Proficiency in Python 3.9+ with type hints for building orchestration scripts, business logic modules, and CLI tooling.

• Proficiency in Bash and shell scripting for pipeline step execution, environment setup, and automation tasks.

• Proficiency with Salesforce CLI for metadata retrieval, deployment, org authentication, and Apex test execution.

• Strong command of Git CLI including branch management, merge conflict resolution, cherry-pick operations, and multi-branch workflow coordination.

• Solid understanding of Salesforce metadata types, sandbox architecture, deployment processes, and the Salesforce development lifecycle.

• Demonstrated experience implementing CI/CD practices, environment management, and release management processes.

• Ability to produce comprehensive technical documentation including architecture guides, SOPs, and operational runbooks.

• Strong diagnostic and analytical skills with the ability to triage deployment failures and resolve complex integration issues.

• Effective communication and collaboration with cross-functional teams including developers, administrators, release managers, and executive stakeholders.

• U.S. Citizenship is required.

• Must be eligible to obtain and maintain a Government Public Trust Clearance.

• Must pass pre-employment qualifications of Cherokee Federal.

PREFERRED QUALIFICATIONS (NICE TO HAVE)

• Salesforce Certified Development Lifecycle and Deployment Designer.

• Test automation experience including framework design, test suite development, and integration into CI/CD pipelines.

• Experience with Robot Framework or Playwright for end-to-end automated testing of Salesforce applications.

• Copado experience or certification, with demonstrated understanding of Copado’s branching strategy and deployment methodology.

• Demonstrated knowledge of advanced branching strategies for Salesforce metadata management, including promotion branch workflows, environment synchronization, and conflict resolution patterns.

• Experience with code quality and security scanning tools such as SonarQube, PMD for Apex, or Checkmarx.

• Familiarity with Docker containerization and container registry management.

• Experience with sfdx-git-delta or similar delta deployment tooling for optimized Salesforce metadata deployments.

• Additional Salesforce certifications (e.g., Administrator, Platform App Builder, or Consultant certifications).