Salesforce Security Architect - IAM Strategist

EPAM Systems, Inc.; New York (NY); Remote; USD 75,000 - 95,000; Full time

Job summary

EPAM Systems, Inc. is seeking an experienced Salesforce Security Consultant to support security remediation and hardening initiatives for a major client's Salesforce environment. The role focuses on identity and access management, permissions, authentication, and overall platform security governance.

This client-facing position involves frequent collaboration with technical teams and executives. Temporary, full-time through the end of 2026 with strong potential to extend into 2027, with

Qualifications

• Strong Salesforce platform knowledge with architect-level experience.
• Experience with Salesforce security and remediation initiatives.
• Knowledge of IAM principles and controls.
• Excellent communication and stakeholder management skills.

Responsibilities

• Assess the client's Salesforce security configurations across identity, access management, permissions, and authentication.
• Identify security gaps and prioritize remediation activities based on business impact.
• Recommend and guide the implementation of improvements to profiles, permission sets, sharing models, and access controls.
• Advise on authentication and single sign-on strategies, including multi-factor authentication.
• Lead consultative discussions with client teams and leadership and translate complex security concepts for non-technical audiences.
• Develop documentation covering current-state assessments, recommendations, and remediation plans.

Skills

Salesforce security

Identity and Access Management

Stakeholder management

Communication skills

Security architecture

Education

Salesforce Identity and Access Management Architect certification

Job description

EPAM Systems, Inc. is seeking an experienced Salesforce Security Consultant to support security remediation and hardening initiatives for a major client's Salesforce environment. The role focuses on identity and access management, permissions, authentication, and overall platform security governance.

This client-facing position involves frequent collaboration with technical teams and executives. Temporary, full-time through the end of 2026 with strong potential to extend into 2027, with