Salesforce Security Engineer

CADRE GOVERNMENT SOLUTIONS; United States; On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

401k match

Medical, Dental, Vision

Paid Time Off

Continuing Education Budget

Technology Budget

Cell Phone Budget

Wellness Budget

Awards & Bonuses

Profit Sharing

Job summary

CADRE GOVERNMENT SOLUTIONS seeks a Salesforce Security Engineer to connect Salesforce, S-Docs, AWS, and legacy apps for high-volume communications. You will assess architecture, perform hands-on development, and deliver DevSecOps integration with security-first design.

Responsibilities include building serverless AWS integrations, enforcing least-privilege access, and embedding security testing into CI/CD, while maintaining government-grade documentation and governance.

Qualifications

• Bachelor's degree in CS/IS/Cybersecurity or equivalent experience.
• Experience in DevOps/DevSecOps or software integration for federal programs.
• Hands-on Salesforce development: Apex, Flow, LWC, REST/SOAP or Bulk API.
• Experience with document-generation tools (S-Docs, Conga) and HTML/PDF templates.
• Experience building serverless AWS integrations and monitoring.
• Experience with high-volume, fault-tolerant integration pipelines.
• Experience with security testing integrated into CI/CD pipelines.
• Knowledge of RMF/NIST 800-53, FISMA, ATO processes.
• Experience with CI/CD across environments and scripting (Python, Bash, PowerShell).
• Strong written communication for government audiences.

Responsibilities

• Assess end-to-end communication workflow across Salesforce, S-Docs, AWS, and VA Notify.
• Evaluate HTML/PDF template generation and data dependencies in S-Docs.
• Examine AWS Lambda capacity, SQS queues, and DLQs, with monitoring.
• Validate solution against scalability, security, audits, and compliance.
• Document findings and architectural decisions for governance reviews.
• Build and refine Salesforce data models and integration components.
• Implement API Gateway, Lambda, SQS, DLQs, and logging pipelines.
• Automate configuration, secrets, and access controls per federal baselines.
• Integrate SAST/DAST/SCA into CI/CD pipelines.

Skills

DevSecOps

Salesforce security

Scripting (Python/Bash/PowerShell)

Technical documentation

NIST RMF / RMF / FISMA knowledge

Education

Bachelor's degree in CS/IS/Cybersecurity

Equivalent professional experience

Tools

Apex, Flow, LWC, REST/SOAP

S-Docs / Conga templating

AWS API Gateway / Lambda / SQS

CI/CD tooling (GitLab CI, Jenkins, Azure DevOps)

Job description

CADRE is seeking a Salesforce Security Engineer to support an initiative that connects Salesforce, S-Docs, AWS, and legacy applications that deliver reliable high-volume communications. The role spans solution assessment, hands-on development, and DevSecOps delivery: evaluating whether the proposed architecture can meet high-volume email and notification requirements, then building, testing, and deploying the integration components that make it work in production.

Key Responsibilities

• Assess the end-to-end communication workflow across Salesforce, S-Docs, AWS, and VA Notify
• Evaluate S-Docs' ability to generate accurate, consistent HTML/PDF templates, and identify data dependencies, automation triggers, and governance controls needed to maintain template quality at scale.
• Examine AWS Lambda's processing capacity, queueing strategies (e.g., SQS, dead-letter queues), and monitoring capabilities
• Validate the overall solution against operational expectations for scalability, security controls, auditability, observability, and enterprise compliance alignment.
• Document findings, architectural decisions, and identified risks/issues to support traceability and future governance reviews.
• Build and refine Salesforce data models, integration components, error-handling logic, and orchestration needed to support end-to-end processing
• Implement AWS components such as API Gateway endpoints, Lambda functions, SQS queueing, dead-letter queues (DLQs), logging/monitoring pipelines, and services that write delivery results back into Salesforce.
• Automate configuration management, secrets management, and access controls across the integration layer in accordance with federal security baselines and least‑privilege principles.
• Integrate application security scanning (SAST/DAST/SCA) into CI/CD pipelines supporting this and other integration workstreams.

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience.
• Experience in DevOps/DevSecOps or software integration engineering roles, ideally supporting federal government or VA programs.
• Hands-on Salesforce development experience, including Apex, Flow/Process Builder, Lightning Web Components, and REST/SOAP or Bulk API integration patterns.
• Experience with a Salesforce document-generation/templating tool (e.g., S-Docs, Conga, or similar), including HTML/PDF template design, data dependencies, and automation triggers.
• Experience building serverless AWS integrations, including API Gateway, Lambda, SQS/DLQ patterns, and CloudWatch-based monitoring and alerting.
• Experience designing or supporting high-volume, fault‑tolerant integration pipelines (e.g., outbound email/notification systems), with attention to throughput, API limits, and latency.
• Practical experience integrating automated security testing (SAST, DAST, SCA) into build and release pipelines.
• Working knowledge of NIST SP 800-53, the Risk Management Framework (RMF), FISMA, and the federal Assessment & Authorization / ATO process.
• Experience with automated testing practices, including high-volume/load testing (50,000+ transactions) and regression test automation.
• Experience deploying through CI/CD pipelines across multiple environments (dev, QA, UAT, production), including tools such as GitLab CI, Jenkins, or Azure DevOps.
• Scripting and automation proficiency in Python, Bash, and/or PowerShell.
• Strong written communication skills, with the ability to produce solution documentation (data flow diagrams, sequence diagrams, decision logs) for both technical and government audiences.
• Must be a U.S. citizen and eligible to obtain and maintain a Public Trust clearance / favorable suitability determination.

Preferred Qualifications (Nice to Have)

• Direct experience with VA Notify or a similar notification-as-a-service platform (e.g., GOV.UK Notify) for outbound email/SMS delivery and status/bounce reporting.
• Direct experience supporting VA programs, including familiarity with VA Handbook/Directive 6500, the VA Technical Reference Model (TRM), and the VA ProPath SDLC methodology.
• Salesforce certifications (e.g., Platform Developer I/II, Integration Architecture Designer) and/or AWS certifications (e.g., AWS Certified Developer, Solutions Architect).
• Experience with federal GRC/ATO management tools such as eMASS or Xacta.
• Experience with SIEM and log management tools (e.g., Splunk, ELK Stack) supporting continuous monitoring.
• Familiarity with Section 508 accessibility standards and testing tools.
• Experience with container technologies (Docker, Kubernetes/OpenShift) and Infrastructure as Code (Terraform, Ansible, or CloudFormation).
• Experience working within Agile/Scrum delivery teams on federal contracts.

How We’ll Support You:

Keeping people satisfied is no small undertaking. At CADRE, our commitment to supporting employees extends further than conventional benefits. While we offer competitive industry-standard packages, our focus goes beyond transactional care.

This is why we developed the CADRE Cares Program which encompasses a range of benefits and initiatives aimed at enhancing the overall well‑being and job satisfaction of employees.

We want to support our employees at the times they need it the most. We envision unwavering commitment to our employees that sets a new standard for compassionate and impactful business practices.

CADRE Convoy Program:

• A dedicated support system designed to cater to your individual needs and enhance your overall well‑being, no matter where you are.

CADRE Connect Program:

• A series of intentional touchpoints, events, and initiatives that promote open communication and encourage continuous growth and development among team members.

CADRE Compensation Program:

• 401k Safe Harbor Plans with matching & immediate vesting
• Medical, Dental, & Vision Plans
• Paid Time Off: Holidays, Vacation, Wellness, & Personal Leave Plans
• Continuing Education & Training Budget
• Office & Technology Budget
• Cell Phone Budget
• Wellness & Healthy Living Budget
• Awards & Bonuses
• Profit Sharing Plans

Who We Are:

We’re more than a government contracting company. We’re a cadre, a specialized team finely honed in providing innovative solutions that meet the complex and evolving needs of government agencies. We strategically mobilize, manage, and maintain specialized cadres using our RO(M³) model.

CADRE GOVERNMENT SOLUTIONS is an Equal Opportunity and

It is the policy of CADRE GOVERNMENT SOLUTIONS to provide equal employment opportunity to all employees and qualified applicants without regard to race, color, religion, national origin, sex, age, disability, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected characteristic under federal, state, or local law.