Security Engineer

Maplesoft Group, an SEB Company; Ottawa; Hybrid; CAD 110,000 - 138,000; Full time

Job summary

Maplesoft Group in Peel, Ontario is seeking a Hybrid Senior Security Engineer – Salesforce to provide strategic security guidance and hands-on expertise across the Salesforce lifecycle.

You will conduct security posture assessments, design secure configurations, implement MFA, OAuth, and SAML, review Shield and DevOps practices, and mentor teams to improve governance and compliance.

Qualifications

• University or college degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field.
• Minimum 5 years of experience designing, implementing, and supporting Salesforce solutions in enterprise environments.
• Hands-on experience architecting Salesforce solutions with end-to-end delivery responsibility.
• Experience delivering multiple enterprise Salesforce implementations with complex processes and integrations.
• Experience implementing Salesforce security models and controls, including Shield.
• Strong knowledge of Salesforce security architecture, governance, vulnerability management, and risk mitigation.
• Experience with DevOps methodologies and secure SDLC practices.
• Experience with OAuth and SAML configurations within Salesforce.

Responsibilities

• Conduct comprehensive Salesforce security posture and health assessments, identifying configuration, access-control, architecture, integration, and compliance gaps.
• Develop prioritized remediation strategies for identified Salesforce security vulnerabilities and risks.
• Review and strengthen Login Policies, Session Controls, and Multi-Factor Authentication (MFA).
• Establish and enhance Salesforce security standards, governance practices, and Secure-by-Design principles.
• Maximize the use of Salesforce native security capabilities and Salesforce Shield.
• Implement and support code and configuration scanning tools, static code analysis, and continuous security monitoring.
• Collaborate with cybersecurity, IT Solutions, platform administration, and audit stakeholders.

Skills

Salesforce security

Security governance

Vulnerability management

DevOps security

IAM (OAuth/SAML)

Apex/LWC security

Education

Bachelor's degree in CS/Engineering/IT/Cybersecurity

Tools

Salesforce Shield

Static code analysis

Job description

Job ID: 14368

Job Title: Security Engineer

Contract Length: 12 Months

Location: Hybrid in Peel, ON

Federal Government Clearance Level Required: None

Vacancy Type

• New Position

About Us

Maplesoft Group is currently seeking a Hybrid Senior Security Engineer – Salesforce to provide strategic security guidance and hands‑on expertise in the design, configuration, deployment, assessment, and optimization of Salesforce capabilities within a complex enterprise environment.

Position Summary

The Senior Security Engineer will provide expert advisory and delivery services throughout the Salesforce lifecycle, with a strong focus on security, governance, vulnerability management, secure architecture, and compliance.

The successful candidate will establish and enhance a comprehensive Salesforce security and governance framework, conduct Salesforce security and health assessments, evaluate integration security, implement continuous monitoring and auditing practices, and develop prioritized remediation strategies.

This role will work closely with cybersecurity, IT solutions, platform administrators, and audit stakeholders to ensure Salesforce solutions are secure, compliant, resilient, and aligned with organizational cybersecurity standards and Salesforce best practices.

Key Responsibilities

• Conduct comprehensive Salesforce security posture and health assessments, identifying configuration, access‑control, architecture, integration, and compliance gaps.
• Develop prioritized remediation strategies for identified Salesforce security vulnerabilities and risks.
• Review and optimize Salesforce security controls, including Profiles, Permission Sets, Permission Set Groups, Roles, Role Hierarchies, Sharing Rules, Organization‑Wide Defaults, Field‑Level Security, and Record‑Level Security.
• Review and strengthen Login Policies, Session Controls, and Multi‑Factor Authentication (MFA).
• Establish and enhance Salesforce security standards, governance practices, and Secure‑by‑Design principles.
• Maximize the use of Salesforce native security capabilities and Salesforce Shield.
• Implement and support code and configuration scanning tools, static code analysis, and continuous security monitoring.
• Conduct security reviews of Apex, LWC, configurations, integrations, and vendor‑provided code.
• Enforce secure coding standards and secure API integration protocols.
• Assess and improve SDLC and DevOps practices from a Salesforce security perspective.
• Evaluate and strengthen Salesforce integration security, including IAM protocols such as OAuth and SAML.
• Establish continuous monitoring, auditing, and vulnerability management processes.
• Support compliance with applicable privacy, regulatory, cybersecurity, and organizational security requirements.
• Collaborate with cybersecurity, IT Solutions, platform administration, and audit stakeholders.
• Provide expert guidance on Salesforce security best practices and emerging security capabilities.
• Mentor internal technical and business teams and provide knowledge transfer and training.

Required Qualifications

• University or college degree/diploma in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field.
• Minimum 5 years of experience designing, implementing, and supporting Salesforce solutions in enterprise environments.
• Minimum 5 years of hands‑on experience architecting Salesforce solutions with responsibility for end‑to‑end delivery.
• Experience delivering at least three enterprise Salesforce implementations involving complex business processes and integrations.
• Demonstrated hands‑on experience implementing Salesforce security models and controls.
• Experience configuring and integrating Salesforce Shield.
• Strong experience with Salesforce security architecture, governance, vulnerability management, and risk mitigation.
• Experience with DevOps methodologies and secure SDLC practices.
• Experience with static code analysis and secure coding practices for Apex and LWC.
• Demonstrated experience conducting Salesforce security reviews, security posture assessments, and vulnerability assessments.
• Experience with Identity and Access Management configurations within Salesforce, including OAuth and SAML.
• Strong technical expertise in security auditing and compliance.

Preferred Qualifications

• SDLC Foundation Certificate or higher.
• Salesforce Certified Application Architect certification.
• Salesforce Certified Integration Architecture Designer certification.
• Experience establishing enterprise Salesforce security standards and governance frameworks.
• Experience mentoring technical teams and delivering Salesforce security training and knowledge transfer.

Compensation

Salary Range: $80.00 - $100.00 / hour

Our recruitment process is led by human recruiters who review all applications and make the final hiring decisions. We use AI‑assisted tools to help screen and organize applications. These tools do not replace human judgment, and all hiring decisions are made by people.

Please note that data collected by the Company may be stored or processed on servers located outside of Canada.

Submission Deadline

Wednesday, August 26, 2026 - 5:00pm EST

Maplesoft is an equal opportunity employer and welcomes applications from all qualified candidates. Accommodations are available upon request throughout the recruitment process.