Description
Salesforce is seeking a Salesforce Platform Expert who specializes in security implementation. You are not just a compliance officer; you are a builder. You understand the Salesforce metadata API better than anyone, you know the limits of Apex Managed Sharing, and you know exactly which "Session Settings" break the user experience if configured incorrectly.
In this role, you will be the bridge between our security requirements and the technical reality of the Salesforce platform. You will use your deep platform expertise to architect, configure, and implement the controls that keep our ecosystem secure without sacrificing performance or agility.
Key Responsibilities
- Platform Security Implementation (The "Hands-On" Work)
- Design and implement complex sharing models. Optimize Org-Wide Defaults (OWD), Sharing Rules, Account Teams, and Territory Management to ensure strict data segregation.
- Lead the technical deployment of Salesforce Shield. Manage Tenant Secrets, define encryption policies for standard/custom fields, and configure Field Audit Trails to meet retention policies.
- Configure and troubleshoot SSO (SAML/OIDC), Connected Apps, and Login Flows. Managing certificates and Key Management (BYOK) where applicable.
- Event Monitoring & Detection
- Build Transaction Security Policies (using Apex or Low-Code) to block data exfiltration attempts in real-time.
- Configure Event Monitoring to export logs to our SIEM (Splunk/New Relic). Create dashboards to visualize login anomalies and report exports.
- Secure Development Lifecycle (SDLC)
- Act as the "Security Gatekeeper" for deployments. Review Apex and LWC code for common vulnerabilities (SOQL Injection, XSS, Enforcing Sharing).
- Configure static code analysis tools (e.g., PMD, Checkmarx, Clayton) within our CI/CD pipeline (Copado/Gearset/Jenkins) to auto-reject insecure code.
- Connected App & OAuth Governance (Critical Focus)
- Select and implement the correct OAuth flows for specific use cases (e.g., JWT Bearer Flow for server-to-server integration vs. Web Server Flow for user-facing apps vs. Device Flow for IoT).
- Enforce the principle of Least Privilege by meticulously defining and auditing OAuth Scopes (e.g., ensuring an integration only has api access and not full access).
- Technical Advisory
- Advise the business on the performance impacts of security decisions (e.g., "How will encrypting this field impact SOQL query performance?").
- Review the Salesforce Release Notes (3x/year) specifically for security updates (e.g., MFA enforcement, Browser policy changes) and proactively prepare the org.
Qualifications
- Required Salesforce Expertise (The "Must Haves"):
- 10+ Years of hands-on experience in the Salesforce ecosystem as a Technical Architect, Developer, or Senior Administrator.
- Sharing & Visibility Master: You can explain "Implicit Sharing," "Group Maintenance Tables," and "Apex Managed Sharing" in your sleep.
- Apex & Metadata Fluency: You can read Apex triggers and understand how to query the LoginHistory or SetupAuditTrail objects via SOQL.
- Implementation Experience: Proven track record of actually turning on and configuring Platform Encryption, Event Monitoring, or multi-factor authentication in a large, complex org.
- Certifications:
- Required: Salesforce Certified System Architect (or progress towards it).
- Required: Salesforce Certified Sharing and Visibility Architect.
- Required: Salesforce Certified Identity and Access Management Architect.
- Bonus: Salesforce Certified Technical Architect (CTA).
Benefits
- Time off programs
- Medical, dental, vision
- Mental health support
- Paid parental leave
- Life and disability insurance
- 401(k)
- Employee stock purchasing program