Salesforce Security Architect

EPAM Systems, Inc.; New York (NY); Remote; USD 75,000 - 95,000; Full time

Job summary

EPAM Systems, Inc. is seeking an experienced Salesforce Security Consultant to support security remediation and hardening initiatives for a major client's Salesforce environment. The role focuses on identity and access management, permissions, authentication, and overall platform security governance.

This client-facing position involves frequent collaboration with technical teams and executives. Temporary, full-time through the end of 2026 with strong potential to extend into 2027, with

Qualifications

• Strong Salesforce platform knowledge with architect-level experience.
• Experience with Salesforce security and remediation initiatives.
• Knowledge of IAM principles and controls.
• Excellent communication and stakeholder management skills.

Responsibilities

• Assess the client's Salesforce security configurations across identity, access management, permissions, and authentication.
• Identify security gaps and prioritize remediation activities based on business impact.
• Recommend and guide the implementation of improvements to profiles, permission sets, sharing models, and access controls.
• Advise on authentication and single sign-on strategies, including multi-factor authentication.
• Lead consultative discussions with client teams and leadership and translate complex security concepts for non-technical audiences.
• Develop documentation covering current-state assessments, recommendations, and remediation plans.

Skills

Salesforce security

Identity and Access Management

Stakeholder management

Communication skills

Security architecture

Education

Salesforce Identity and Access Management Architect certification

Job description

Drive immediate impact on a high-visibility project shaping Salesforce security strategies.EPAM is seeking an experienced Salesforce Security Consultant to support security remediation and hardening initiatives for a major client's Salesforce environment. In this role, you will evaluate the client's current security posture, with a focus on identity and access management, permissions, authentication, and overall platform security practices, and recommend improvements that reduce risk and strengthen governance.This is a highly client-facing position that requires frequent collaboration with both technical teams and business and executive stakeholders.Note: Temporary, full-time (40 hours per week) through the end of 2026 with strong potential to extend into 2027. Candidates primarily seeking permanent opportunities are still encouraged to apply. Our Salesforce practice is growing, and we may be able to consider you for other projects!Req # 1100436477ResponsibilitiesAssess the client's Salesforce security configurations across identity, access management, permissions, and authenticationIdentify security gaps and risks and prioritize remediation activities based on business impactRecommend and guide the implementation of improvements to profiles, permission sets, sharing models, and access controlsAdvise on authentication and single sign-on strategies, including multi-factor authenticationLead consultative discussions with client technical teams and business stakeholdersPresent findings, recommendations, and remediation roadmaps to client leadershipTranslate complex security concepts into clear, actionable guidance for non-technical audiencesCollaborate with delivery teams to support timely execution of remediation initiativesDevelop documentation covering current-state assessments, recommendations, and remediation plansPromote Salesforce security best practices to support long-term governance and platform sustainabilityRequirementsStrong Salesforce platform knowledge, with experience in a Solution Architect, Business Solution Architect, or comparable architect-level consulting roleProven experience with Salesforce security and remediation initiativesWorking knowledge of identity and access management principlesStrong communication skills with the ability to discuss security topics confidently with client leadership and manage stakeholder relationshipsSalesforce Identity and Access Management Architect certification or a comparable security-focused certification (preferred)For remote work in New York City only.EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our clients, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.Engineer the Future with a Career at EPAMThis posting includes a good faith range of the salary EPAM would reasonably expect to pay the selected candidate. The range provided reflects base salary only. Individual compensation offers within the range are based on a variety of factors, including, but not limited to: geographic location, experience, credentials, education, training; the demand for the role; and overall business and labor market considerations. Most candidates are hired at a salary within the range disclosed. Salary range: $75 - $95. In addition, the details highlighted in this job posting above are a general description of all other expected benefits and compensation for the position.Applications will be accepted on a rolling basis.EPAM will not provide new H-1B visa sponsorship for this position. Candidates with existing transferable H-1B status may be considered.It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.