Salesforce Developer (2152)

Senior Salesforce Security & Data Governance Architect
📌 Position: Senior Salesforce Security & Data Governance Architect
Location: Remote from LATAM
Contract Type: Full-time vendor (Contract directly with In All Media)
Time Zone Alignment: To be confirmed
🧩 About In All Media
In All Media is a global technology and design firm focused on building impactful digital solutions through remote, distributed teams across LATAM.
We partner with international clients across industries, providing long-term technical expertise, product innovation, and team augmentation.
Contract Details: This is a 100% remote contractor position open to talent anywhere in LATAM. Your contract and engagement will be directly managed with In All Media.
🚀 Project Overview
Our client is a global online recruitment and career marketplace platform connecting millions of job seekers with employers worldwide through large-scale, high-traffic enterprise cloud architectures.
This role is embedded within the client's core enterprise CRM and customer data platform engineering organization, focusing on strengthening security, modernizing identity and access management, and establishing sustainable governance practices across Salesforce Core and Salesforce Data Cloud environments.
The platform supports tens of millions of records and substantial enterprise integration traffic, requiring a highly experienced Salesforce security professional capable of designing and executing complex security improvements without disrupting live business operations.
The engineer will lead a comprehensive enterprise access model redesign, consolidate legacy permission structures, remediate security vulnerabilities, strengthen authentication policies, and establish least-privilege access across human users and integration accounts.
A critical component of the engagement involves implementing production-ready Salesforce Data Cloud governance and generative AI trust controls, including data classification, consent management, retention policies, data lineage, PII masking, and Einstein Trust Layer configurations.
The ideal candidate combines deep Salesforce security architecture expertise with extensive hands-on configuration experience, strong enterprise governance capabilities, and a proven track record of delivering security improvements in complex production environments.
🔍 Key Responsibilities
Enterprise Access Model Redesign: Lead the modernization of Salesforce security architecture by consolidating legacy profiles into scalable permission sets and permission set groups. Redesign sharing models, eliminate unnecessary elevated permissions, and implement least-privilege access without disrupting existing users or business processes.
Salesforce Identity & Authentication Security: Configure, manage, and optimize Salesforce authentication mechanisms, including Single Sign-On (SSO), SAML, Multi-Factor Authentication (MFA), certificates, session policies, connected apps, and external client apps to strengthen enterprise identity security.
Security Auditing & Remediation: Assess and remediate Salesforce Security Health Check findings, strengthen authentication policies, enforce appropriate MFA requirements across human and automated access paths, and improve the overall security posture of the Salesforce environment.
Integration User Security & Access Hardening: Modernize legacy integration account configurations by implementing least-privilege permission models, appropriately scoped connected apps and external client apps, and secure token-based authentication mechanisms.
Salesforce Data Cloud Governance: Design and implement a comprehensive governance framework for Salesforce Data Cloud, including data spaces, data classification, access controls, consent management, retention policies, and data lineage across enterprise customer data environments.
Generative AI Trust & Data Protection: Configure and audit Salesforce Einstein Trust Layer controls, including Personally Identifiable Information (PII) masking, grounding data access restrictions, and secure generative AI data handling practices.
Security Monitoring & Governance Tooling: Use Salesforce Security Center, Setup Audit Trail, Security Health Check, and Salesforce platform security capabilities to identify configuration risks, investigate changes, and maintain enterprise security standards.
Technical Debt & Security Rule Optimization: Audit, simplify, and remediate accumulated sharing-rule and validation-rule backlogs, improving maintainability, security transparency, and consistency across enterprise Salesforce configurations.
Security Architecture Standards & Governance: Establish sustainable governance policies, architectural review gates, configuration standards, and security controls to support long-term platform stability and compliance.
Technical Documentation & Knowledge Transfer: Develop operational runbooks, document security architecture decisions, configuration changes, and remediation procedures, and conduct structured handover sessions with internal engineering teams.
💡 Must-Have Skills
Experience Level: 5+ years of hands-on Salesforce architecture and configuration experience, preferably 7+ years, within large enterprise environments supporting tens of millions of records and heavy integration traffic.
Enterprise Access Model Redesign: Proven experience directly owning and implementing a large-scale Salesforce access model redesign, including profile consolidation, permission set architecture, permission set groups, and complex sharing model configurations.
Hands-On Salesforce Identity & Security: Deep practical expertise configuring Salesforce Core security, including SSO, SAML, MFA, certificates, session policies, connected apps, external client apps, profiles, permission sets, and enterprise sharing architectures.
Salesforce-Native Security Expertise: Demonstrated hands-on experience implementing security controls directly within Salesforce. Experience limited to external IAM platforms such as Okta or Microsoft Entra, without substantial Salesforce security configuration experience, is not sufficient.
Security Health Check & Remediation: Proven track record identifying, prioritizing, and resolving Salesforce Security Health Check findings, including authentication hardening, permission remediation, and security posture improvements.
Authentication & Integration Security: Strong experience securing human and automated access paths, implementing appropriate MFA controls, managing secure integration authentication, and enforcing least-privilege permissions for service and integration accounts.
CDP & Data Cloud Governance: Hands-on experience designing and implementing governance controls within Salesforce Data Cloud or an equivalent Customer Data Platform (CDP), including access management, data spaces, data classification, consent, retention, and lineage.
Einstein Trust Layer & AI Security: Practical experience configuring and auditing generative AI security controls, specifically Einstein Trust Layer, PII masking, and grounding data access restrictions.
Salesforce Security & Governance Tooling: Hands-on proficiency with Salesforce Core Platform, Salesforce Data Cloud, Salesforce Security Center, Setup Audit Trail, and Einstein Trust Layer.
🌟 Nice-to-Have Skills

Skills
Salesforce, Generative AI, CRM, Auditing, Documentation

Experience
5+ yrs

Work arrangement
Yes