S

Salesforce

Builds cloud software for customer relationships

Platform Security Architect

Full-Time
No salary listed
Expert
Indianapolis, IN, USA
Remote
CybersecuritySecurity Engineering & Architecture
Company Historically Provides H1B Sponsorship

About the job

Requirements
  • At least 10 years of hands-on experience in the Salesforce ecosystem as a Technical Architect, Developer, or Senior Administrator.
  • Expertise in Sharing and Visibility, including Implicit Sharing, Group Maintenance Tables, and Apex Managed Sharing.
  • Ability to read Apex triggers and query LoginHistory or SetupAuditTrail objects using SOQL.
  • Demonstrated experience configuring Platform Encryption, Event Monitoring, or multi-factor authentication in a large, complex organization.
  • Understanding of Least Privilege, Separation of Duties, encryption at rest and in transit, and the CIA Triad.
  • Familiarity with the OWASP Top 10 web vulnerabilities in Salesforce, including preventing cross-site scripting in Visualforce or Lightning Web Components.
  • Salesforce Certified System Architect certification or progress toward it.
  • Salesforce Certified Sharing and Visibility Architect certification.
  • Salesforce Certified Identity and Access Management Architect certification.
Responsibilities
  • Design and implement complex sharing models, optimizing Org-Wide Defaults, Sharing Rules, Account Teams, and Territory Management to ensure data segregation.
  • Lead technical deployment of Salesforce Shield, manage Tenant Secrets, define encryption policies for standard and custom fields, and configure Field Audit Trails to meet retention policies.
  • Configure and troubleshoot single sign-on using SAML or OpenID Connect, Connected Apps, and Login Flows; manage certificates and Bring Your Own Key where applicable.
  • Build real-time Transaction Security Policies using Apex or low-code tools to block data exfiltration attempts.
  • Configure Event Monitoring exports to Splunk or New Relic, and create dashboards to visualize login anomalies and report exports.
  • Review Apex and Lightning Web Components code for vulnerabilities including SOQL injection, cross-site scripting, and missing sharing enforcement.
  • Configure static code analysis tools such as PMD, Checkmarx, or Clayton within CI/CD pipelines such as Copado, Gearset, or Jenkins to reject insecure code.
  • Select and implement appropriate OAuth flows for use cases, including JWT Bearer Flow for server-to-server integrations, Web Server Flow for user-facing applications, and Device Flow for IoT.
  • Define and audit OAuth scopes according to least privilege, ensuring integrations receive only necessary access.
  • Configure granular session policies per Connected App, enforce High Assurance sessions with MFA for sensitive applications, and define timeout values.
  • Manage Consumer Keys and Secrets, including rotation strategies and ensuring secrets are not hardcoded in external systems.
  • Configure per-application IP restrictions or relaxation settings to balance security and accessibility.
  • Implement and manage Salesforce Security Center to define and push baseline security policies, including password policies, session settings, and trusted IP ranges, from a central tenant to child organizations.
  • Configure Security Center to detect configuration drift and create immediate alerts for weakened security settings in child organizations, such as disabled MFA or relaxed IP restrictions.
  • Maintain a consolidated view of security health scores across the multi-org environment and report KPI improvements to leadership.
  • Advise the business on performance impacts of security decisions, such as how field encryption affects SOQL query performance.
  • Review Salesforce release notes three times a year for security updates and proactively prepare the organization.
Desired Qualifications
  • Salesforce Certified Technical Architect certification.

About the company

Salesforce sells cloud software that helps businesses manage sales leads, customer service, marketing, and online commerce from shared customer records. Its flagship Sales Cloud tracks accounts and deals, while Service Cloud organizes support cases and Agentforce builds AI assistants that act on company data. Teams access these tools through a browser and connect outside apps and data sources, with Slack for work messages and Tableau for visual analysis. Salesforce earns most of its revenue from software subscriptions and support, with professional services for implementation and training. Marc Benioff co-founded Salesforce in 1999, and its headquarters are in San Francisco, California.

Company Size

10,001+

Company Stage

IPO

Headquarters

San Francisco, California

Founded

1999

Get referred to Salesforce

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • AI brings paying demand: Salesforce reported nearly $3.9 billion in Agentforce and Data 360 recurring revenue pace in August 2026.
  • Giving back gets paid time: Salesforce employees receive seven paid volunteer days each year.
  • Subscriptions provide a durable base: Salesforce earned $10.8 billion from subscriptions and support in the July 2026 quarter.

What critics are saying

  • Office roles demand attendance: Salesforce's published guidelines require four to five days in person for office-based roles.
  • Expansion brought debt: Salesforce borrowed $6 billion in November 2025 to help finance the Informatica acquisition.
  • Reliability failed during Dreamforce: a September 2026 Salesforce outage disrupted affected Hyperforce environments for seven hours and 36 minutes.

What makes Salesforce unique

  • Partners extend its platform: Salesforce's AgentExchange combines third-party apps, AI agents and services with unified purchasing and billing.
  • Everyone publishes a plan: Salesforce employees write annual goals visible to colleagues through its internal V2MOM system.
  • Learning includes real practice: Salesforce's free Trailhead courses award badges after quizzes and hands-on exercises in practice accounts.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Health Insurance
  • Life Insurance
  • 401(k) Retirement Plan
  • Remote Work Options
  • Flexible Work Hours
  • Parental Leave
  • Wellness Program

Growth & Insights and Company News

6 month growth

2%

1 year growth

0%

2 year growth

2%
Resilience Media
Oct 30th, 2026
Scoop: Salesforce is paying $375M for Rune Technologies

Salesforce is acquiring defence tech startup Rune Technologies for $375 million in a combination of shares and cash, according to

Channel NewsAsia
Oct 29th, 2026
Salesforce to buy defence tech firm Rune to expand military business

Salesforce said on Thursday it will buy defence technology company Rune Technologies to expand Missionforce, its business serving the US military and government agencies. Financial terms were not disclosed. Rune makes AI-powered software that helps troops forecast supply needs, plan the use of resources, and decide where to send them, including in places with little or no network connection. The US Army and US Marine Corps already use its technology. Salesforce said Missionforce is growing 80% year-over-year, a year after launch, with customers in all six branches of the US military. The company has been adding AI offerings through acquisitions. Last week it agreed to buy Braze for about $5.66 billion. The Rune deal is expected to close in the fourth quarter of Salesforce's fiscal year 2027.

Salesforce
Oct 27th, 2026
Salesforce expands Agent Fabric to automatically stop runaway costs and AI agent failures before they impact customers.

Salesforce expands Agent Fabric to automatically stop runaway costs and AI agent failures before they impact customers. New Agent Evals gives leaders the confidence to scale more agents into production by continuously evaluating agent performance and costs, no matter what platform the agent is built on. Today, Salesforce announced Agent Evals, API Evals, and advanced cost controls for Agent Fabric, its AI control plane for managing and governing agents across platforms. As enterprises scale AI, agents can fail silently, delivering wrong answers and racking up costs before anyone notices. CIOs and AI leaders can now catch problems before they turn into customer complaints or runaway costs, with automated interventions when quality slips and hard spending limits that cap usage at budget. With over 1.2 billion requests handled daily, Agent Fabric brings proactive control to enterprise AI at scale. "What excites us most about Agent Evals is that it doesn't stop at telling us something is wrong. When an agent's quality drops, Agent Fabric can step in automatically, alerting the right owner or pulling the agent offline before a small issue becomes a widespread customer problem. That's the missing piece for running agents at scale, and it will give us the confidence to keep expanding AI across our business. We are excited to partner with Salesforce and help shape Agent Evals Beta." - Poonam Deshpande, Director of Engineering, Digital Commerce at ASICS Digital As the models, APIs, costs and systems underneath agents evolve, issues can silently surface. Catching them proactively means building, maintaining, and evaluating performance continuously. Yet today fewer than half of organizations with agents evaluate them on live traffic. Once issues are uncovered, resolution means tracking down the owner and getting approval to restrict the agent while it keeps producing harmful results and racking up token spend. With 96% of enterprises running agents on more than one platform and out-of-the-box agents like Fin on the rise, the need for oversight keeps growing. Moving from "cross-your-fingers AI" to continuous control. To address these challenges, Salesforce is bringing continuous evaluation and automated intervention into the same control plane that enterprises already use to manage and govern their AI agents: * Agent Evals: Automatically generate tests before deployment, then evaluate agents, LLMs, and MCP servers in production against defined quality thresholds. When results fall short, they trigger predefined interventions - including the Agent Kill Switch - with approval where the team's policy requires it. * API Evals: Agents fail when the APIs they depend on change. API Evals automatically generates functional and performance tests from API specifications, catching breaking changes before they reach production. * Advanced cost controls: The FinOps Dashboard and Model Wallet give budget owners one view of AI spending and hard limits that stop requests before costs exceed budget, while Cost Optimization Policies cut token usage by up to 75% (based on test scenarios) through semantic caching, payload compression, and response trimming. Together, evaluation and governance help teams assess whether agents complete tasks correctly, use the right tools, operate efficiently, and follow security policies. Connecting those findings to predefined responses reduces the manual work required to oversee agents across platforms and helps enterprises keep them operating as intended after deployment. "Enterprises can only scale agents as fast as they can keep them accurate and on budget. Today, spotting a wrong answer or a spending spike is one job, and stopping it is another. Agent Fabric unifies them, bringing evaluations, cost controls, and intervention together so teams can contain issues instantly and scale agents with confidence." - Andrew Comstock, SVP & GM, MuleSoft & Agent Fabric Here's what proactive control looks like in practice. Consider a retailer that is looking to reduce the costs of a live order-support agent: * Scenario: A retailer switches its order-support agent to a lower-cost AI model to reduce operating costs. * Detection: After the model change, Agent Evals automatically runs scheduled tests and detects that the agent is providing inaccurate information about delayed orders. * Resolution: Agent Evals automatically flags the quality issue and requests approval to quarantine the agent, based on their preference to keep a human in the loop. Once approved, the agent is quarantined while the team refines the agent's instructions on how to handle delayed orders. They rerun the evaluation on the lower cost model using the new instructions to confirm it's performing as expected before returning it to production. * Result: The retailer can pursue AI cost savings with confidence, knowing that quality issues can be automatically detected and intervention initiated when needed. This helps protect the customer experience while giving the business greater control over its AI agents. Going further across the platforms and gateways you already use. Agent Fabric already automatically discovers and governs agents across major AI platforms. Two updates extend that further, to agents running in internal and third-party environments, and to APIs managed on gateways from other vendors: * Custom Agent Scanner: Extend Agent Fabric's automated discovery to internal environments, systems behind firewalls, and third-party platforms beyond its out-of-the-box support. Build custom scanners to discover and catalog agents, models, MCP servers, and APIs in the Agent Registry - without registering each asset manually. * Open Policies for Federated API Gateways: Discover, enforce, and track API policies across gateways from Azure, Apigee, and Kong, applying a policy such as IP allowlisting or rate limiting across all of them in one action instead of one at a time. Perspectives. "Our customers rely on us to run critical services every day, and AI agents are increasingly becoming part of those operations. Agent Fabric gives us a central AI control plane to govern agents at scale, while Agent Evals will help us validate that agents are performing against clear business and service outcomes. Together, these capabilities will help us orchestrate AI agents alongside our operational experts, ensuring that automation is deployed responsibly, that the right human intervention is available when needed, and that we continue to deliver the trusted outcomes our customers depend on." - Tiina Stephens, Director of AI Engineering, Capita "A lot of what's going on in big organizations with AI today involves one-offs, lacking governance or visibility. With Agent Fabric, we now have that single control plane where we can see our agents, who built them, and shut them down if something goes wrong. That's how you move from experiments to real enterprise scale with trust." - Adam Jones, Executive Director of Enterprise Transformation, GE Appliances, a Haier company "As we bring AI agents into customer service, we want to be sure we can guide and oversee them every step of the way. With Agent Fabric as our secure AI control plane, Newell Brands is building an agentic enterprise where every agent across every brand is visible, governed, and accountable. That's how we're scaling intelligent service globally without compromising customer trust." - Steve Sigrist, Vice President, Global Customer Service, Newell Brands Availability. * Agent Evals: Beta in November 2026. Generally available January 2027. * API Evals: Beta in November 2026. Generally available January 2027. * Custom Agent Scanner: Beta today. Generally available January 2027. * Agent Kill Switch: Generally available today. Triggered-Agent Kill Switch generally available January 2027. * Open Policies for Federated API Gateways: Generally available today. * FinOps Dashboard, Model Wallet, and Cost Optimization Policies: Generally available today. This article may include references to services or features that are still in development and are unreleased. Customers should make their purchase decision based on fully released and available features. * Get an overview of Agent Fabric and how it serves as your enterprise AI control plane. * Discover how to control AI costs and eliminate silent token spikes. * Explore how Agent Fabric unifies AI agents into a governed network. Get the latest Salesforce News & Insights, straight to your inbox. Just for you.

Yahoo Finance
Oct 24th, 2026
Salesforce launches Hunter AI sales agent, deepens Demandbase and Docusign ties

Salesforce (NYSE:CRM) has launched Hunter, an outbound AI sales agent, and deepened its integration with Demandbase to bring real-time B2B data into its platform. The Demandbase tie-up feeds buying group and engagement signals into Salesforce workflows for prospecting and account prioritisation. Docusign also expanded its partnership to embed agreement management into Salesforce, Agentforce, and Slack AI-driven processes. The moves support Salesforce's push to earn revenue from AI agents and workflow tools, not just CRM seats. Hunter is still in a pilot that ends later in 2026. Adoption data after that will show how many customers use it and whether they accept the pricing.

工商時報
Oct 21st, 2026
New deals 40% focus on AI agents; Salesforce Taiwan anniversary team expands fivefold

New deals 40% focus on AI agents; Salesforce Taiwan anniversary team expands fivefold 2026.10.21 19:51 China Times real-time, Liu Minggeng Customer relationship management (CRM) software leader Salesforce's Taiwan office is about to mark its first anniversary. Taiwan general manager Hsu Chia-sheng said on the 21st that, driven by the AI wave, Taiwan's first-year revenue and customer count both achieved double-digit growth, and the team size has expanded to five times its initial size at establishment; among newly signed cases, as many as 40% have adopted an autonomous AI agent platform and real-time data engine, demonstrating the strong momentum of Taiwanese enterprises shifting from exploring AI to actual business applications. Salesforce set up its Taiwan office in October 2025, and Hsu Chia-sheng took over as Taiwan general manager in January this year. Hsu said that over the past year the team has expanded across sales, technology, and customer service, with headcount growing to five times the initial level, and it has already submitted next year's expansion blueprint to headquarters. He said plainly that headquarters is highly optimistic about Taiwan's growth potential and even believes double-digit growth 'could be more aggressive', sending a positive signal of continued increased investment in Taiwan. Hsu pointed out that enterprise software is not a hardware component that can 'ship today if available, ship tomorrow'; the key lies in conducting proof of concept (POC) using the customer's own scenarios. At present, Agentforce and Data 360 account for 40% of adoptions in newly signed cases. In manufacturing, Advantech is a flagship customer, with AI agents assisting with quotations and dispatching; in finance, the focus is on Taiwanese enterprises expanding into Southeast Asia, using AI agents to quickly connect lending, credit, and risk warnings. In response to concerns about whether AI will replace enterprise software, the technical team emphasized that large language models have only single-turn memory; enterprises' daily-changing orders and permissions still require core system governance, and after switching to AI tools, system usage has instead surged. Salesforce is also working with NVIDIA to build a CRM reasoning model, 'Koa', whose error rate is only one-third that of mainstream models; it is expected to officially launch in the U.S. in winter 2026. Entering its second year in Taiwan, Salesforce has set its direction as advancing AI applications from single-point experiments to scaled deployment, continuing to deepen its presence in manufacturing and finance, and following Taiwanese businesses into Southeast Asia, striving for continued double-digit business growth.