Platform Security Architect
Salesforce2 days ago
Responsibilities
- Design and implement Salesforce sharing models using Org-Wide Defaults, Sharing Rules, Account Teams, and Territory Management.
- Deploy and manage Salesforce Shield, including Tenant Secrets, Platform Encryption policies, and Field Audit Trails.
- Configure and troubleshoot SSO, SAML/OIDC, Connected Apps, Login Flows, certificates, and BYOK key management.
- Build Transaction Security Policies and configure Event Monitoring exports, SIEM integrations, and security dashboards.
- Review Apex and LWC code for vulnerabilities and integrate PMD, Checkmarx, and Clayton into CI/CD pipelines using Copado, Gearset, or Jenkins.
- Architect and govern OAuth flows, scopes, session policies, client-secret rotation, and IP restrictions for Connected Apps.
- Implement Salesforce Security Center for centralized policy management, drift detection, and multi-org security-health reporting.
- Advise on platform-performance impacts of security decisions and review Salesforce security-related release changes.
Requirements
- 10+ years of hands-on Salesforce ecosystem experience as a Technical Architect, Developer, or Senior Administrator.
- Deep expertise in Salesforce sharing and visibility concepts, including Implicit Sharing, Group Maintenance Tables, and Apex Managed Sharing.
- Ability to read Apex triggers and query LoginHistory and SetupAuditTrail with SOQL.
- Demonstrated implementation experience with Platform Encryption, Event Monitoring, or multi-factor authentication in a large, complex org.
- Understanding of least privilege, separation of duties, encryption at rest and in transit, and the CIA Triad.
- Familiarity with OWASP Top 10 vulnerabilities in Salesforce, including XSS prevention in Visualforce and LWC.
- Required Salesforce Certified System Architect certification or progress toward it.
- Required Salesforce Certified Sharing and Visibility Architect certification.
- Required Salesforce Certified Identity and Access Management Architect certification.
- Salesforce Certified Technical Architect certification is a bonus.
Benefits
- Salesforce provides time-off programs, medical, dental, vision, mental-health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- Certain roles may be eligible for incentive compensation, equity, and benefits; compensation varies by location, job level, knowledge, skills, and experience.
- Reasonable accommodations are available during the application and recruiting process.
Tech Stack
JenkinsSplunk
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.