Salesforce Developer

Senior Salesforce Security & Data Governance Architect

Position: Senior Salesforce Security & Data Governance Architect

Location: Remote from LATAM

Contract Type: Full-time vendor (Contract directly with In All Media)

Time Zone Alignment: To be confirmed

About In All Media

In All Media is a global technology and design firm focused on building impactful digital solutions through remote, distributed teams across LATAM.

We partner with international clients across industries, providing long-term technical expertise, product innovation, and team augmentation.

Contract Details: This is a 100% remote contractor position open to talent anywhere in LATAM. Your contract and engagement will be directly managed with In All Media.

Project Overview

Our client is a global online recruitment and career marketplace platform connecting millions of job seekers with employers worldwide through large-scale, high-traffic enterprise cloud architectures.

This role is embedded within the client's core enterprise CRM and customer data platform engineering organization, focusing on strengthening security, modernizing identity and access management, and establishing sustainable governance practices across Salesforce Core and Salesforce Data Cloud environments.

The platform supports tens of millions of records and substantial enterprise integration traffic, requiring a highly experienced Salesforce security professional capable of designing and executing complex security improvements without disrupting live business operations.

The engineer will lead a comprehensive enterprise access model redesign, consolidate legacy permission structures, remediate security vulnerabilities, strengthen authentication policies, and establish least-privilege access across human users and integration accounts.

A critical component of the engagement involves implementing production-ready Salesforce Data Cloud governance and generative AI trust controls, including data classification, consent management, retention policies, data lineage, PII masking, and Einstein Trust Layer configurations.

The ideal candidate combines deep Salesforce security architecture expertise with extensive hands-on configuration experience, strong enterprise governance capabilities, and a proven track record of delivering security improvements in complex production environments.

Key Responsibilities

• Enterprise Access Model Redesign: Lead the modernization of Salesforce security architecture by consolidating legacy profiles into scalable permission sets and permission set groups. Redesign sharing models, eliminate unnecessary elevated permissions, and implement least-privilege access without disrupting existing users or business processes.
• Salesforce Identity & Authentication Security: Configure, manage, and optimize Salesforce authentication mechanisms, including Single Sign-On (SSO), SAML, Multi-Factor Authentication (MFA), certificates, session policies, connected apps, and external client apps to strengthen enterprise identity security.
• Security Auditing & Remediation: Assess and remediate Salesforce Security Health Check findings, strengthen authentication policies, enforce appropriate MFA requirements across human and automated access paths, and improve the overall security posture of the Salesforce environment.
• Integration User Security & Access Hardening: Modernize legacy integration account configurations by implementing least-privilege permission models, appropriately scoped connected apps and external client apps, and secure token-based authentication mechanisms.
• Salesforce Data Cloud Governance: Design and implement a comprehensive governance framework for Salesforce Data Cloud, including data spaces, data classification, access controls, consent management, retention policies, and data lineage across enterprise customer data environments.
• Generative AI Trust & Data Protection: Configure and audit Salesforce Einstein Trust Layer controls, including Personally Identifiable Information (PII) masking, grounding data access restrictions, and secure generative AI data handling practices.
• Security Monitoring & Governance Tooling: Use Salesforce Security Center, Setup Audit Trail, Security Health Check, and Salesforce platform security capabilities to identify configuration risks, investigate changes, and maintain enterprise security standards.
• Technical Debt & Security Rule Optimization: Audit, simplify, and remediate accumulated sharing-rule and validation-rule backlogs, improving maintainability, security transparency, and consistency across enterprise Salesforce configurations.
• Security Architecture Standards & Governance: Establish sustainable governance policies, architectural review gates, configuration standards, and security controls to support long-term platform stability and compliance.
• Technical Documentation & Knowledge Transfer: Develop operational runbooks, document security architecture decisions, configuration changes, and remediation procedures, and conduct structured handover sessions with internal engineering teams.

Must-Have Skills

• Experience Level: 5+ years of hands-on Salesforce architecture and configuration experience, preferably 7+ years, within large enterprise environments supporting tens of millions of records and heavy integration traffic.
• Enterprise Access Model Redesign: Proven experience directly owning and implementing a large-scale Salesforce access model redesign, including profile consolidation, permission set architecture, permission set groups, and complex sharing model configurations.
• Hands-On Salesforce Identity & Security: Deep practical expertise configuring Salesforce Core security, including SSO, SAML, MFA, certificates, session policies, connected apps, external client apps, profiles, permission sets, and enterprise sharing architectures.
• Salesforce-Native Security Expertise: Demonstrated hands-on experience implementing security controls directly within Salesforce. Experience limited to external IAM platforms such as Okta or Microsoft Entra, without substantial Salesforce security configuration experience, is not sufficient.
• Security Health Check & Remediation: Proven track record identifying, prioritizing, and resolving Salesforce Security Health Check findings, including authentication hardening, permission remediation, and security posture improvements.
• Authentication & Integration Security: Strong experience securing human and automated access paths, implementing appropriate MFA controls, managing secure integration authentication, and enforcing least-privilege permissions for service and integration accounts.
• CDP & Data Cloud Governance: Hands-on experience designing and implementing governance controls within Salesforce Data Cloud or an equivalent Customer Data Platform (CDP), including access management, data spaces, data classification, consent, retention, and lineage.
• Einstein Trust Layer & AI Security: Practical experience configuring and auditing generative AI security controls, specifically Einstein Trust Layer, PII masking, and grounding data access restrictions.
• Salesforce Security & Governance Tooling: Hands-on proficiency with Salesforce Core Platform, Salesforce Data Cloud, Salesforce Security Center, Setup Audit Trail, and Einstein Trust Layer.

Nice-to-Have Skills

• Advanced Salesforce Data Cloud Experience: Direct exposure to Salesforce Data Cloud environments, with the ability to rapidly expand and operationalize governance configurations in production.
• Enterprise IAM & SSO Ecosystems: Complementary experience integrating Salesforce with external enterprise identity and access management platforms, including SSO and federated authentication solutions.
• Privacy & Regulatory Compliance: Working knowledge of privacy and data protection regulations such as GDPR and CCPA, particularly their application to enterprise CRM systems and customer data platforms.
• Security Assessment-Driven Delivery: Experience translating formal security assessments, Salesforce Signature Success reviews, or Security Health Check audits into implemented and validated production improvements.
• Salesforce Certifications: Certifications such as Identity and Access Management Architect, Sharing and Visibility Architect, Data Cloud Consultant, or equivalent Salesforce security and architecture credentials.

Time Zone & Collaboration

This role requires close collaboration with distributed engineering teams, platform architects, security stakeholders, and enterprise data governance specialists.

Candidates must be comfortable leading technical security discussions, coordinating production configuration changes, participating in architectural reviews, and conducting structured knowledge-transfer sessions.

Specific time zone alignment and required business-hour overlap will be confirmed during the recruitment process.

Language

Candidates must be comfortable discussing enterprise security architecture, documenting governance frameworks, and collaborating with distributed technical teams in English.