Salesforce Security Engineer

Altis Technology; Brampton; Hybrid; CAD 120,000 - 160,000; Full time

Job summary

Altis Technology in Brampton, ON, seeks a senior Salesforce security architect to guide design, configuration, deployment, and ongoing optimization of Salesforce security and governance in a complex public-sector environment.

You will collaborate with cybersecurity, IT solutions, platform admins, and business teams to implement Secure by Design principles, review access controls, and strengthen SDLC and DevSecOps practices across Salesforce implementations.

Qualifications

• 5+ years of enterprise Salesforce architecture and end-to-end delivery experience.
• University or college education in Computer Science, Engineering, or related field.
• Deep experience with Salesforce security architecture, governance, and audits.
• Hands-on IAM with OAuth, SAML, SSO, and MFA.
• Strong Apex and LWC development alongside DevSecOps practices.

Responsibilities

• Assess Salesforce security posture and identify remediation priorities.
• Strengthen governance and Secure by Design across implementations.
• Review profiles, permissions, roles, sharing rules, and MFA settings.
• Evaluate Salesforce Shield, OAuth, SAML, SSO configurations and compliance controls.
• Implement or enhance continuous monitoring, vulnerability management, and code quality.

Skills

Salesforce security architecture

IAM (OAuth SAML SSO MFA)

Apex/LWC development

DevSecOps & SDLC

Security governance & auditing

Education

Bachelor's degree in CS/Engineering

Tools

Salesforce Shield

Static code analysis tools

Job description

Location: Brampton, ON, Hybrid, 2 days per week on-site
Language: Strong written and spoken English communication skills
Duration: 1-year contract, 7 hours per day

About the Opportunity

This is an opportunity to take on a highly specialized Salesforce security role within a complex public sector enterprise environment. Youll provide strategic guidance and hands‑on expertise across the design, configuration, deployment, and ongoing optimization of Salesforce capabilities, helping strengthen security, governance, and platform resilience.

Working closely with cybersecurity, IT solutions, platform administrators, audit stakeholders, and business teams, youll help establish a comprehensive Salesforce security and governance framework. Your work will directly shape secure development practices, vulnerability remediation, continuous monitoring, and future Salesforce implementations.

Whats In It for You

Youll step into a senior advisory role where your Salesforce security expertise will have meaningful enterprise-wide impact. This opportunity offers exposure to complex architecture, integrations, governance, DevSecOps, and security assessment work, along with the chance to mentor internal teams and influence long-term security standards.

Your Responsibilities

• Youll assess Salesforce security posture, identify vulnerabilities and develop prioritized remediation strategies.
• Youll enhance security standards using Secure by Design principles and strengthen governance across future Salesforce implementations.
• Youll review and optimize profiles, permission sets, roles, sharing rules, organization-wide defaults, field and record-level security, login policies, session controls, and MFA.
• Youll evaluate Salesforce Shield, IAM configurations including OAuth, SAML and SSO, integration security, and compliance controls.
• Youll implement or enhance static code, configuration scanning, continuous monitoring, auditing, and vulnerability management practices.
• Youll enforce secure Apex and LWC coding standards and help strengthen DevSecOps and SDLC processes, including vendor-provided code.
• Youll provide expert guidance, mentorship, training, and knowledge transfer to technical and business teams.

Skills and Qualifications

• 5+ years of enterprise Salesforce architecture, implementation, and end-to-end delivery experience, including at least three complex enterprise implementations.
• University or college education in Computer Science, Engineering, or a related field.
• Deep experience with Salesforce security architecture, governance, Salesforce Shield, vulnerability assessment, remediation, and security auditing.
• Hands‑on expertise with IAM technologies including OAuth, SAML, SSO, and MFA.
• Advanced secure Apex/LWC development experience, static code analysis, DevOps, DevSecOps, and SDLC practices.
• Strong knowledge of Salesforce access controls, integration security, risk mitigation, privacy, compliance, and secure API protocols.
• SDLC Foundation Certificate or higher, Salesforce Certified Application Architect, and Salesforce Certified Integration Architecture Designer are considered strong assets.

We appreciate the time and effort all applicants invest in their submissions. Please note that only candidates shortlisted for this role will be contacted directly. However, your profile will remain under consideration for future opportunities that align with your experience and career goals. All qualified applicants will receive fair consideration for employment. We welcome individuals of all backgrounds, experiences, and identities including those who identify as women, members of racialized groups, Indigenous Peoples, persons with disabilities, and 2SLGBTQIA+ communities. If you require an accommodation, please review our accessibility policy and reach out to our accessibility officer with any questions. Our human recruiters review all applications and always make the final hiring decision. On occasion, we also use AI-assisted tools to help review applications.