Senior Production Support Engineer
Salesforce3 days ago
Base Salary
$149k - $246k/yr
Responsibilities
- Implement and maintain FedRAMP security controls mapped to NIST SP 800-53.
- Engineer AWS network security architecture using VPCs, segmentation, security groups, NACLs, Transit Gateway, PrivateLink, WAF, and egress controls.
- Design and improve identity and access management, including IdP integration, SSO, federation, IAM, privileged access, secrets management, and KMS.
- Build reusable Terraform infrastructure-as-code modules with secure defaults, policy-as-code, and automated guardrails.
- Harden Linux systems, containers, and Kubernetes workloads.
- Perform vulnerability remediation, POA&M tracking, audit evidence collection, and automated control validation.
- Partner with Engineering, SRE, and Compliance to embed security into software development and deployment pipelines.
- Contribute to incident response and detection engineering, including logging, SIEM integration, and alerting.
- Create technical documentation and architecture reviews and mentor other engineers.
Requirements
- At least 5 years of experience in security engineering, cloud security, or infrastructure security.
- Experience implementing security controls in a FedRAMP environment or equivalent framework such as NIST 800-53, NIST 800-171, or CMMC.
- Strong knowledge of NIST security controls, control families, baselines, and technical mappings.
- Hands-on Terraform experience covering module design, state management, and CI/CD-driven deployments.
- Deep AWS network security engineering experience with VPC, Transit Gateway, security groups, WAF, GuardDuty, Security Hub, Config, and CloudTrail.
- Hands-on identity engineering experience with IdPs, SAML, OIDC, OAuth 2.0, LDAP, Kerberos, AWS IAM, and KMS.
- Strong understanding of TLS and PKI, including certificate lifecycle management and secure protocol configuration.
- Strong Linux systems and container experience.
- Proficiency in Python, Go, or Bash.
- Strong written and verbal communication skills, including collaboration with auditors and engineering teams.
- U.S. citizenship and ability to work from the U.S.; willingness to complete additional screening or background checks.
- Preferred experience includes FedRAMP authorization or assessment support, Kubernetes security at scale, vulnerability management, FIPS 140-2/140-3 cryptography, AWS GovCloud, FedRAMP 20x, OSCAL, CISA directives, DISA STIGs, policy-as-code, software supply chain security, and relevant certifications such as AWS Security Specialty, CKS, or CCSP.
- Preferred experience includes using AI tools to accelerate engineering work while reviewing generated code and configurations for security.
Benefits
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- The role is based in the U.S. and requires working from the U.S.; additional screening or background checks may be required.
- The stated base salary ranges are $148,500-$223,900 annually, or $178,900-$246,000 annually in select San Francisco and New York City metropolitan areas; bonus, equity, and benefits are excluded from these ranges.
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.