{"id":4297188,"url":"https://alion.io/job/inallmedia-salesforce-developer","title":"Salesforce Developer","company":{"id":4431647,"name":"InAllMedia","domain":"inallmedia.com","url":"https://alion.io/company/inallmedia","size_band":"51-200","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":{"grade":"A","score":95,"open_postings":33,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":236,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Enterprise Apps","role_family":"Enterprise Apps","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chile"],"countries":["CL"],"hiring_countries":["AR","BR","CO","MX","AI","AG","AW","BS","BB","BZ","BM","BO","VG","BQ","KY","CL","CR","CW","DM","DO","EC","SV","FK","GF","GD","GP","GT","GY","HT","HN","JM","MQ","MS","NI","PA","PY","PE","PR","KN","LC"],"hiring_countries_total":49,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Okta","optional":false},{"name":"Salesforce Data Cloud","optional":false},{"name":"Apex","optional":true},{"name":"GDPR","optional":true}],"status":"live","first_seen_at":"2026-11-13T23:07:29Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-14T01:46:29Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Senior Salesforce Security & Data Governance Architect\nPosition: Senior Salesforce Security & Data Governance Architect\nLocation: Remote from LATAM\nContract Type: Full-time vendor (Contract directly with In All Media)\nTime Zone Alignment: To be confirmed\nAbout In All Media\nIn All Media is a global technology and design firm focused on building impactful digital solutions through remote, distributed teams across LATAM.\nWe partner with international clients across industries, providing long-term technical expertise, product innovation, and team augmentation.\nContract Details: This is a 100% remote contractor position open to talent anywhere in LATAM. Your contract and engagement will be directly managed with In All Media.\nProject Overview\nOur client is a global online recruitment and career marketplace platform connecting millions of job seekers with employers worldwide through large-scale, high-traffic enterprise cloud architectures.\nThis role is embedded within the client's core enterprise CRM and customer data platform engineering organization, focusing on strengthening security, modernizing identity and access management, and establishing sustainable governance practices across Salesforce Core and Salesforce Data Cloud environments.\nThe platform supports tens of millions of records and substantial enterprise integration traffic, requiring a highly experienced Salesforce security professional capable of designing and executing complex security improvements without disrupting live business operations.\nThe engineer will lead a comprehensive enterprise access model redesign, consolidate legacy permission structures, remediate security vulnerabilities, strengthen authentication policies, and establish least-privilege access across human users and integration accounts.\nA critical component of the engagement involves implementing production-ready Salesforce Data Cloud governance and generative AI trust controls, including data classification, consent management, retention policies, data lineage, PII masking, and Einstein Trust Layer configurations.\nThe ideal candidate combines deep Salesforce security architecture expertise with extensive hands-on configuration experience, strong enterprise governance capabilities, and a proven track record of delivering security improvements in complex production environments.\nKey Responsibilities\nEnterprise Access Model Redesign: Lead the modernization of Salesforce security architecture by consolidating legacy profiles into scalable permission sets and permission set groups. Redesign sharing models, eliminate unnecessary elevated permissions, and implement least-privilege access without disrupting existing users or business processes.\nSalesforce Identity & Authentication Security: Configure, manage, and optimize Salesforce authentication mechanisms, including Single Sign-On (SSO), SAML, Multi-Factor Authentication (MFA), certificates, session policies, connected apps, and external client apps to strengthen enterprise identity security.\nSecurity Auditing & Remediation: Assess and remediate Salesforce Security Health Check findings, strengthen authentication policies, enforce appropriate MFA requirements across human and automated access paths, and improve the overall security posture of the Salesforce environment.\nIntegration User Security & Access Hardening: Modernize legacy integration account configurations by implementing least-privilege permission models, appropriately scoped connected apps and external client apps, and secure token-based authentication mechanisms.\nSalesforce Data Cloud Governance: Design and implement a comprehensive governance framework for Salesforce Data Cloud, including data spaces, data classification, access controls, consent management, retention policies, and data lineage across enterprise customer data environments.\nGenerative AI Trust & Data Protection: Configure and audit Salesforce Einstein Trust Layer controls, including Personally Identifiable Information (PII) masking, grounding data access restrictions, and secure generative AI data handling practices.\nSecurity Monitoring & Governance Tooling: Use Salesforce Security Center, Setup Audit Trail, Security Health Check, and Salesforce platform security capabilities to identify configuration risks, investigate changes, and maintain enterprise security standards.\nTechnical Debt & Security Rule Optimization: Audit, simplify, and remediate accumulated sharing-rule and validation-rule backlogs, improving maintainability, security transparency, and consistency across enterprise Salesforce configurations.\nSecurity Architecture Standards & Governance: Establish sustainable governance policies, architectural review gates, configuration standards, and security controls to support long-term platform stability and compliance.\nTechnical Documentation & Knowledge Transfer: Develop operational runbooks, document security architecture decisions, configuration changes, and remediation procedures, and conduct structured handover sessions with internal engineering teams.\nMust-Have Skills\nExperience Level: 5+ years of hands-on Salesforce architecture and configuration experience, preferably 7+ years, within large enterprise environments supporting tens of millions of records and heavy integration traffic.\nEnterprise Access Model Redesign: Proven experience directly owning and implementing a large-scale Salesforce access model redesign, including profile consolidation, permission set architecture, permission set groups, and complex sharing model configurations.\nHands-On Salesforce Identity & Security: Deep practical expertise configuring Salesforce Core security, including SSO, SAML, MFA, certificates, session policies, connected apps, external client apps, profiles, permission sets, and enterprise sharing architectures.\nSalesforce-Native Security Expertise: Demonstrated hands-on experience implementing security controls directly within Salesforce. Experience limited to external IAM platforms such as Okta or Microsoft Entra, without substantial Salesforce security configuration experience, is not sufficient.\nSecurity Health Check & Remediation: Proven track record identifying, prioritizing, and resolving Salesforce Security Health Check findings, including authentication hardening, permission remediation, and security posture improvements.\nAuthentication & Integration Security: Strong experience securing human and automated access paths, implementing appropriate MFA controls, managing secure integration authentication, and enforcing least-privilege permissions for service and integration accounts.\nCDP & Data Cloud Governance: Hands-on experience designing and implementing governance controls within Salesforce Data Cloud or an equivalent Customer Data Platform (CDP), including access management, data spaces, data classification, consent, retention, and lineage.\nEinstein Trust Layer & AI Security: Practical experience configuring and auditing generative AI security controls, specifically Einstein Trust Layer, PII masking, and grounding data access restrictions.\nSalesforce Security & Governance Tooling: Hands-on proficiency with Salesforce Core Platform, Salesforce Data Cloud, Salesforce Security Center, Setup Audit Trail, and Einstein Trust Layer.\nNice-to-Have Skills\nAdvanced Salesforce Data Cloud Experience: Direct exposure to Salesforce Data Cloud environments, with the ability to rapidly expand and operationalize governance configurations in production.\nEnterprise IAM & SSO Ecosystems: Complementary experience integrating Salesforce with external enterprise identity and access management platforms, including SSO and federated authentication solutions.\nPrivacy & Regulatory Compliance: Working knowledge of privacy and data protection regulations such as GDPR and CCPA, particularly their application to enterprise CRM systems and customer data platforms.\nSecurity Assessment-Driven Delivery: Experience translating formal security assessments, Salesforce Signature Success reviews, or Security Health Check audits into implemented and validated production improvements.\nSalesforce Certifications: Certifications such as Identity and Access Management Architect, Sharing and Visibility Architect, Data Cloud Consultant, or equivalent Salesforce security and architecture credentials.\nTime Zone & Collaboration\nThis role requires close collaboration with distributed engineering teams, platform architects, security stakeholders, and enterprise data governance specialists.\nCandidates must be comfortable leading technical security discussions, coordinating production configuration changes, participating in architectural reviews, and conducting structured knowledge-transfer sessions.\nSpecific time zone alignment and required business-hour overlap will be confirmed during the recruitment process.\nLanguage\nCandidates must be comfortable discussing enterprise security architecture, documenting governance frameworks, and collaborating with distributed technical teams in English.","description_format":"text","description_chars":9022,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Argentina","iso":"AR","kind":"region"},{"name":"Brazil","iso":"BR","kind":"region"},{"name":"Colombia","iso":"CO","kind":"region"},{"name":"Mexico","iso":"MX","kind":"region"},{"name":"Anguilla","iso":"AI","kind":"region"},{"name":"Antigua and Barbuda","iso":"AG","kind":"region"},{"name":"Aruba","iso":"AW","kind":"region"},{"name":"Bahamas","iso":"BS","kind":"region"},{"name":"Barbados","iso":"BB","kind":"region"},{"name":"Belize","iso":"BZ","kind":"region"},{"name":"Bermuda","iso":"BM","kind":"region"},{"name":"Bolivia","iso":"BO","kind":"region"},{"name":"British Virgin Islands","iso":"VG","kind":"region"},{"name":"Bonaire, Sint Eustatius and Saba","iso":"BQ","kind":"region"},{"name":"Cayman Islands","iso":"KY","kind":"region"},{"name":"Chile","iso":"CL","kind":"country"},{"name":"Costa Rica","iso":"CR","kind":"region"},{"name":"Curaçao","iso":"CW","kind":"region"},{"name":"Dominica","iso":"DM","kind":"region"},{"name":"Dominican Republic","iso":"DO","kind":"region"},{"name":"Ecuador","iso":"EC","kind":"region"},{"name":"El Salvador","iso":"SV","kind":"region"},{"name":"Falkland Islands","iso":"FK","kind":"region"},{"name":"French Guiana","iso":"GF","kind":"region"},{"name":"Grenada","iso":"GD","kind":"region"},{"name":"Guadeloupe","iso":"GP","kind":"region"},{"name":"Guatemala","iso":"GT","kind":"region"},{"name":"Guyana","iso":"GY","kind":"region"},{"name":"Haiti","iso":"HT","kind":"region"},{"name":"Honduras","iso":"HN","kind":"region"},{"name":"Jamaica","iso":"JM","kind":"region"},{"name":"Martinique","iso":"MQ","kind":"region"},{"name":"Montserrat","iso":"MS","kind":"region"},{"name":"Nicaragua","iso":"NI","kind":"region"},{"name":"Panama","iso":"PA","kind":"region"},{"name":"Paraguay","iso":"PY","kind":"region"},{"name":"Peru","iso":"PE","kind":"region"},{"name":"Puerto Rico","iso":"PR","kind":"region"},{"name":"Saint Kitts and Nevis","iso":"KN","kind":"region"},{"name":"Saint Lucia","iso":"LC","kind":"region"},{"name":"Saint Vincent and the Grenadines","iso":"VC","kind":"region"},{"name":"Saint-Pierre and Miquelon","iso":"PM","kind":"region"},{"name":"Sint Maarten","iso":"SX","kind":"region"},{"name":"Suriname","iso":"SR","kind":"region"},{"name":"Trinidad and Tobago","iso":"TT","kind":"region"},{"name":"Turks and Caicos Islands","iso":"TC","kind":"region"},{"name":"Uruguay","iso":"UY","kind":"region"},{"name":"United States Virgin Islands","iso":"VI","kind":"region"},{"name":"Venezuela","iso":"VE","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Outsourcing & Dedicated Teams","Custom Software Development","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-11-14T01:46:29Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":236,"reasons":["conf:2","win:early"],"computed_at":"2026-11-14T04:04:48Z"},"pay":null,"html_url":"https://alion.io/job/inallmedia-salesforce-developer","json_url":"https://alion.io/job/inallmedia-salesforce-developer.json","meta":{"generated_at":"2026-11-14T04:04:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6439,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4431647},"rest":"https://alion.io/mcp/rest/get_company?id=4431647"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finallmedia-salesforce-developer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finallmedia-salesforce-developer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finallmedia-salesforce-developer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/inallmedia-salesforce-developer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finallmedia-salesforce-developer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4297188}},{"tool":"search_jobs","arguments":{"company":"inallmedia.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4297188},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}