📌 Position: Senior Salesforce Developer (Security & Data Cloud Governance) Location: 100% Remote from LATAM Contract Type: Full-time vendor (direct contract withhttps://inallmedia.com/) Time Zone Alignment: EST ±2
🧭 About Inallmedia.com Inallmedia.com is a global technology and design firm focused on building impactful digital solutions through remote, distributed teams across LATAM. We partner with international clients across industries, providing long-term technical expertise, product innovation, and team augmentation. This role is a 100% remote, full-time vendor engagement contracted directly throughhttps://inallmedia.com/.
🚀 Project Overview You will be embedded within the core enterprise CRM and customer data platform engineering organization of a global online recruitment and career marketplace platform. Operating across large-scale, high-traffic cloud architectures that connect millions of job seekers with employers worldwide, this engagement focuses on hardening security, streamlining identity and access management (IAM), and establishing enduring data governance across high-volume Salesforce Core and Salesforce Data Cloud environments handling tens of millions of records and heavy integration traffic.
You will lead a comprehensive enterprise access model redesign, remediate security posture findings, enforce multi-factor authentication (MFA) across all human and automated login paths, secure integration accounts with least-privilege token authentication, and implement end-to-end Data Cloud and generative AI trust governance controls.
🔍 Key Responsibilities
- Enterprise Access Model Redesign: Consolidate legacy profiles into scalable permission sets and permission set groups, redesign sharing models without disrupting live users, and eliminate unnecessary elevated permissions.
- Security Remediation & Authentication Hardening: Remediate Salesforce Security Health Check findings, enforce MFA across all login paths (including automated and integration users), tighten session policies, and execute certificate cleanup and lifecycle management.
- Integration User Security: Transition legacy integration users to least-privilege access models utilizing modern, token-based authentication and properly scoped connected and external client apps.
- Data Cloud & AI Trust Governance: Design and configure a production Salesforce Data Cloud governance framework covering data spaces, data classification, consent management, retention policies, data lineage, and Einstein Trust Layer controls (PII data masking and grounding data access rules).
- Technical Debt & Rule Backlog Cleanup: Audit and clear accumulated sharing-rule and validation-rule backlogs to improve system maintainability, performance, and security clarity.
- Governance Documentation & Handover: Establish enduring governance standards, architectural review gates, and operational runbooks, leading a structured knowledge transfer and handover to the internal engineering team.
💡 Must-Have Skills
- Enterprise Salesforce Experience: 5+ years of hands-on Salesforce architecture and configuration experience (7+ years preferred) in large enterprise orgs with tens of millions of records and heavy integration throughput, including direct ownership of an enterprise access model redesign.
- Hands-On Salesforce Identity & Security (Firm Requirement): Deep, practical configuration expertise in Salesforce Core security—including SSO/SAML, MFA, certificates, session policies, connected apps, external client apps, profiles, permission sets, and sharing architectures. (Note: External IAM experience alone, such as Okta or Microsoft Entra, without deep hands-on Salesforce security execution is not sufficient.)
- Security Auditing & Remediation: Proven track record diagnosing and remediating Security Health Check findings and enforcing MFA across both human and automated login paths.
- CDP / Data Cloud Governance: Hands-on experience designing and implementing data governance in Salesforce Data Cloud or an equivalent Customer Data Platform (CDP)—covering access controls, data spaces, classification, consent, retention, and lineage.
- AI Trust & Masking Controls: Practical experience configuring and auditing generative AI trust boundaries, specifically the Einstein Trust Layer, PII masking, and grounding data access rules.
- Security & Governance Tooling: Hands-on proficiency with Salesforce Core Platform, Salesforce Data Cloud, Salesforce Security Center, Setup Audit Trail, and Einstein Trust Layer.
- Agile & Remote Collaboration: Proven experience working in Agile teams and distributed, remote environments.
- English Fluency: Fluent English for daily technical communication and documentation.
🌟 Nice-to-Have Skills
- Salesforce Data Cloud Ramp-Up: Direct production exposure to Salesforce Data Cloud with the ability to rapidly scale governance configurations.
- Broader IAM & SSO Ecosystems: Complementary experience integrating enterprise SSO and IAM platforms (e.g., Okta, Microsoft Entra).
- Privacy & Regulatory Compliance: Working knowledge of data privacy obligations—such as GDPR and CCPA—as applied to CRM and customer data platforms.
- Assessment-Driven Delivery: Track record of translating formal security and health assessments (such as Signature Success reviews or Security Health Check audits) into shipped production fixes.
- Salesforce Certifications: Identity and Access Management Architect, Sharing and Visibility Architect, Data Cloud Consultant, or an equivalent Salesforce security certification.
🌐 Time Zone & Collaboration The role requires close collaboration with engineering teams aligned to US Eastern Time (EST ±2). Flexibility to overlap a few hours daily with North American business hours is expected.
💬 Language All interviews, technical documentation, and daily communication will be conducted in English.
#LI