Salesforce Security Architect

Cognizant; City of Westminster; On-site; GBP 80,000 - 100,000; Full time

Job summary

A global technology leader is seeking a Principal Security Architect to define and lead security architecture for their complex multi-cloud technology stack. This role emphasizes compliance with GDPR, HIPAA, and PCI DSS while partnering with cross-functional teams. The successful candidate will design security frameworks, drive DevSecOps excellence, and influence security strategy. The ideal applicant has experience with Salesforce and a mastery of security protocols such as IAM and API security, making a measurable impact in a cutting-edge environment.

Qualifications

• Experience in security engineering/architecture including Salesforce.
• Hands-on security design for API-led integration and headless CMS.
• Strong knowledge of GDPR and related compliance frameworks.

Responsibilities

• Define reference security architecture across platforms.
• Implement Salesforce Shield and secure configurations.
• Map data flows and embed privacy-by-design controls.

Skills

Security engineering

API security

IAM/SSO/OIDC/SAML

GDPR compliance

Stakeholder engagement

Tools

Salesforce

MuleSoft

Amplience CMS

SIEM

Job description

Are you ready to shape the future of security in a cutting-edge, multi-cloud environment? We’re looking for a Principal Security Architect to define and lead the end-to-end security architecture for a complex technology stack centered on Salesforce Clouds (Commerce, Marketing, Data), Amplience CMS, MuleSoft, and integrations with on-prem and legacy systems.

This is your opportunity to become the security authority for a global enterprise, setting the guardrails that balance regulatory compliance (GDPR, HIPAA, PCI DSS) with delivery velocity. You’ll partner with enterprise architects, platform teams, and product engineering to embed secure-by-design practices from discovery through run.

What You’ll Do:

• Architect the Future: Define reference security architecture across Salesforce, Amplience CMS, MuleSoft, and legacy systems. Create patterns for zero-trust, API security, and data protection.

• Own Identity & Access: Design enterprise IAM with IdP integration (SSO/SAML/OIDC), SCIM provisioning, lifecycle controls, and secret management.

• Platform Security Leadership: Implement Salesforce Shield, Event Monitoring, Transaction Security Policies, and secure configurations for Marketing Cloud, Data Cloud, Amplience, and MuleSoft.

• Champion Privacy & Compliance: Map data flows, define ROPA, and embed privacy-by-design controls aligned to GDPR, HIPAA, and PCI DSS.

• Drive DevSecOps Excellence: Integrate SAST/DAST, IaC scanning, SBOM generation, and secure release governance into delivery pipelines.

• Monitor & Respond: Build detection use cases, integrate logs into SIEM, and establish DLP and threat modeling frameworks.

• Lead & Influence: Chair Security Design Reviews, run threat modeling workshops, and ensure control testing and remediation tracking.

What You Bring

• Experience: Relevant experience in security engineering/architecture including experience with Salesforce and Marketing Cloud/Data Cloud.

• Expertise: Hands‑on security design for API‑led integration (MuleSoft) and headless CMS (Amplience).

• Deep Knowledge: IAM/SSO/OIDC/SAML, OAuth 2.0/JWT, PKI/mTLS, KMS/HSM, Vault, TLS, WAF, DLP, SIEM/SOAR, ZTA.

• Compliance Mastery: Proven track record in GDPR and one of HIPAA/PCI DSS, including DPIA/TRA and audit evidence management.

• Communication: Strong documentation and stakeholder engagement skills.

Preferred Certifications

• Salesforce: Security & Privacy Accredited Professional, Platform Developer I/II, Architect‑level certs.

• MuleSoft: Integration Architect, API Designer/Manager.

• Security: CISSP, CCSP, CISM, CRISC, ISO 27001 LI, Cloud Security certs.

• Privacy: CIPP/E, CIPM.

Why Join Us?

You’ll be at the forefront of securing a global digital ecosystem, influencing strategy, and enabling innovation without compromising trust. If you thrive on complexity and want to make a measurable impact, this is your stage.

Ready to lead? Apply now and help us build security into the DNA of our enterprise.

Cog2025