Salesforce Security Architect

EPAM Systems Inc; San Jose (CA); Remote; USD 103,000 - 131,000; Full time

Job summary

EPAM Systems, Inc. seeks a Salesforce Security Consultant to support remediation and hardening of a major Salesforce environment.

You will assess security posture, focusing on identity and access management, permissions, authentication, and overall platform security, and recommend improvements to reduce risk. This is a highly client-facing, remote, temporary, full-time role through the end of 2026 with strong potential to extend.

Qualifications

• Strong Salesforce platform knowledge with security focus.
• Experience leading security remediation initiatives in Salesforce environments.
• Excellent communication with client leadership and business stakeholders.

Responsibilities

• Assess Salesforce security configurations across IAM, permissions, and authentication.
• Identify security gaps and prioritize remediation by business impact.
• Guide implementation of improvements to profiles, permission sets, and sharing models.
• Advise on MFA and SSO strategies.
• Lead client discussions and present findings to leadership.
• Collaborate with delivery teams to execute remediation plans.
• Develop documentation covering assessments and roadmaps.
• Promote Salesforce security best practices for governance.

Skills

Salesforce security

Identity and access management

Stakeholder communication

Security governance

Salesforce platform knowledge

Tools

Salesforce

Job description

Drive immediate impact on a high-visibility project shaping Salesforce security strategies.

EPAM is seeking an experienced Salesforce Security Consultant to support security remediation and hardening initiatives for a major client's Salesforce environment. In this role, you will evaluate the client's current security posture, with a focus on identity and access management, permissions, authentication, and overall platform security practices, and recommend improvements that reduce risk and strengthen governance.

This is a highly client-facing position that requires frequent collaboration with both technical teams and business and executive stakeholders.

Note: Temporary, full-time (40 hours per week) through the end of 2026 with strong potential to extend into 2027. Candidates primarily seeking permanent opportunities are still encouraged to apply. Our Salesforce practice is growing, and we may be able to consider you for other projects!

Req # 1100436477

Responsibilities

• Assess the client's Salesforce security configurations across identity, access management, permissions, and authentication
• Identify security gaps and risks and prioritize remediation activities based on business impact
• Recommend and guide the implementation of improvements to profiles, permission sets, sharing models, and access controls
• Advise on authentication and single sign-on strategies, including multi-factor authentication
• Lead consultative discussions with client technical teams and business stakeholders
• Present findings, recommendations, and remediation roadmaps to client leadership
• Translate complex security concepts into clear, actionable guidance for non-technical audiences
• Collaborate with delivery teams to support timely execution of remediation initiatives
• Develop documentation covering current-state assessments, recommendations, and remediation plans
• Promote Salesforce security best practices to support long-term governance and platform sustainability

Requirements

• Strong Salesforce platform knowledge, with experience in a Solution Architect, Business Solution Architect, or comparable architect-level consulting role
• Proven experience with Salesforce security and remediation initiatives
• Working knowledge of identity and access management principles
• Strong communication skills with the ability to discuss security topics confidently with client leadership and manage stakeholder relationships
• Salesforce Identity and Access Management Architect certification or a comparable security-focused certification (preferred)

This Remote Position Cannot be Performed in New York City.

This posting includes a good faith range of the salary EPAM would reasonably expect to pay the selected candidate. The range provided reflects base salary only. Individual compensation offers within the range are based on a variety of factors, including, but not limited to: geographic location, experience, credentials, education, training; the demand for the role; and overall business and labor market considerations. Most candidates are hired at a salary within the range disclosed. Salary range: $75 - $95 per hour. In addition, the details highlighted in this job posting above are a general description of all other expected benefits and compensation for the position.

In accordance with the LA County Fair Chance Ordinance, you may find a copy of the Notice containing a summary of the Ordinance’s key provisions here: Concept FCO Posting 8 27 24 (lacounty.gov)

EPAM Systems, Inc. is an equal opportunity employer. We recognize the value of diversity and inclusion in creating success for our customers, business partners, shareholders, employees and communities. We are committed to recruiting, hiring, developing and promoting employees without discrimination. As a global employer, this commitment includes complying with all laws in the countries in which we operate. Nevertheless, we believe equal employment practices should not be limited to what the law requires. Equal opportunity and inclusion are essential to motivate, empower and recognize the best in everyone.

At EPAM, employment actions are based on individual qualifications, without regard to race, color, religion, creed, gender, pregnancy status, sexual orientation, gender identity, gender expression, marital or familial status, national origin, ancestry, genetics, age, disability status, veteran status, citizenship status when otherwise legally able to work, or any other characteristic protected by law.