Senior Principal Software Engineer at Oracle
Salt Lake City, UT
$135,200–$306,400from the description
Jul 11, 2026
Salt Lake City, UT
Jul 21, 2026
What this job asks for AI summary
A formal methods engineering role focused on applying specification and verification techniques — primarily TLA+ and model-checking tools — to large-scale distributed cloud systems. Day-to-day work involves reviewing designs and code, writing formal specifications, catching subtle correctness and security bugs, and developing AI-assisted tooling to automate specification generation and code validation. Suited to engineers with deep distributed systems knowledge and hands-on formal verification experience.
Senior level · 5+ years · Remote · Master's required · Full-time
“or” means any one of them counts — you don't need all of them.
Posted 15 times — it's one opening, so apply once.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
What the occupation pays Median $138,970 (middle half $107,524–$175,762). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (10)
This is a highly specialized formal methods / formal verification role embedded within Oracle Cloud Infrastructure (OCI). The primary day-to-day work is applying formal specification and model-checking to distributed systems rather than conventional software development, making the SOC classification a genuine judgment call; 15-1252 (Software Developers) was chosen because the role requires writing concurrent code and deeply engaging with system implementation, with 15-1299 (Computer Occupations, All Other) as a reasonable runner-up given the research-engineering nature of the work.
The JD requires an MS or higher in Computer Science 'involving a significant amount of formal specification and verification' — this is treated as a hard degree gate (Masters minimum). A PhD is implied as ideal but not strictly required.
The concurrent-language requirement lists C/C++, Java, GoLang, and Rust as alternatives ('at least one of'); C++ is used as the primary name with the others captured as alternatives.
Paxos, Raft, and Viewstamped Replication are listed together as examples of required distributed algorithm knowledge; Paxos is used as the primary with the others as alternatives.
TLC and Apalache are listed together as model-checker examples under the required skills section; TLC is primary with Apalache as an alternative.
TLAPS (mechanical proof tool) is listed as 'ideally' skilled — treated as preferred.
Verus (code-level verification system) appears in the context of AI-assisted methodology work, not as a standalone required skill — treated as preferred.
The 'Additional abilities that are highly valued' section (SQL/NoSQL, networking, Linux, virtualization/QEMU) is explicitly framed as secondary and preferred.
No specific work location is stated in the posting beyond 'US'; the compensation range is US-wide. No CBSA or state could be determined.
Career Level IC5 at Oracle typically corresponds to a senior individual-contributor band, consistent with the 5+ years requirement and scope described.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.