Senior Salesforce Administrator

Private Company; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Private Company is seeking a Senior Salesforce Administrator to lead platform operations in an accredited environment, implementing NIST 800-53 controls across access management, audit logging, and lifecycle management. This onsite role in Arlington, VA requires U.S. citizenship and eligibility for Top Secret clearance.

Responsibilities include configuring Salesforce, building Flow automations, and delivering compliant reports/dashboards while maintaining records management and security posture.

Qualifications

• 5+ years as Salesforce Administrator in enterprise environments.
• Expert-level Flow Builder skills and debugging.
• Deep understanding of Salesforce security and sharing model.
• Strong reporting and dashboard skills with cross-filters and joined reports.
• Meticulous documentation habits and compliance with security requirements.

Responsibilities

• Manage users, permission sets, roles, and groups under least-privilege policy.
• Configure day-to-day Salesforce platform settings: objects, fields, page layouts, and UI.
• Build complex automation in Flow; create reports/dashboards meeting data-classification requirements.
• Maintain audit trails, monitor security controls, and support assessments and audits.
• Coordinate security reviews, sandbox refreshes, and AppExchange security reviews.

Skills

Flow Builder

Security model

Audit logging

Access management

Documentation

Reports

Dashboards

NIST 800-53

Top Secret clearance

Tools

Salesforce

Tableau

Job description

Position Summary

The Senior Salesforce Administrator is the operational lead for the platform and, in an accredited environment, a de facto security operator. Access management, audit logging, and account lifecycle in this role are direct implementations of NIST 800-53 controls.

Position Summary

The Senior Salesforce Administrator is the operational lead for the platform and, in an accredited environment, a de facto security operator. Access management, audit logging, and account lifecycle in this role are direct implementations of NIST 800-53 controls.

Position Requirements

U.S. citizenship, eligibility to obtain a Top Secret security clearance, and the ability to work onsite five days per week in Arlington, VA are required for this position.

Key Responsibilities

Access & Account Management (NIST 800-53 AC and IA families)

• Manage users, permission sets, permission set groups, roles, and public groups under a strict least-privilege model.
• Operate account lifecycle in lockstep with agency personnel actions: provisioning on documented authorization, immediate disablement on separation, and disabling inactive accounts within the interval our policy specifies.
• Conduct and document periodic access recertification; produce the evidence auditors will request.
• Manage privileged access: justify, document, and time-bound every elevated permission; no standing System Administrator access without documented approval.

Audit, Monitoring & Compliance Support

• Monitor and preserve Setup Audit Trail, login history, and Event Monitoring data in line with retention requirements.
• Serve as a primary evidence provider during assessments, annual reviews, and continuous monitoring cycles: pull reports, produce screenshots, and explain configuration to assessors.
• Track and remediate configuration-related POA&M items.
• Run Security Health Check and Salesforce Optimizer on a defined cadence; investigate and remediate drift from the approved baseline.
• Support records management obligations: retention schedules, legal holds and eDiscovery requests.

Platform Configuration

• Responsible for day-to-day configuration: objects, fields, page layouts, record types, dynamic forms, list views, and Lightning app configuration.
• Build complex automation in Flow.
• Build reports and dashboards using Salesforce and Tableau that meet Section 508 requirements and respect data classification in their distribution.
• Validate that every configuration change respects the data classification of the records involved, including CUI marking and handling requirements where applicable.

Change & Release Management

• Manage change request intake: triage, estimate, prioritize, and route items requiring security review before work begins.
• Coordinate sandbox refreshes with attention to what data is permitted in non-production environments.
• Manage AppExchange evaluation through the security review and boundary-impact process.

Data Management

• Maintain data quality: duplicate and matching rules, validation rules, and cleansing initiatives.
• Perform bulk operations with tooling approved for use in the environment, and with documented authorization for any operation touching sensitive data.
• Monitor storage consumption and execute archiving and disposition consistent with federal records retention schedules.

Required Qualifications

• 5+ years as a Salesforce Administrator in a multi-team or enterprise org.
• Expert-level Flow Builder skills including debugging complex flows and understanding order of execution.
• Deep understanding of the Salesforce security and sharing model.
• Strong reporting and dashboard skills including cross-filters, bucketing, and joined reports.
• Meticulous documentation habits. In this environment, undocumented work is treated as work that did not happen.
• U.S. citizenship and ability to obtain and maintain Top Secret clearance.

Certifications

Required: Salesforce Certified Administrator.

Preferred: Advanced Administrator, Platform App Builder, Business Analyst.

Preferred Qualifications

• Prior administration in a FedRAMP, DoD, StateRAMP, or CJIS environment.
• Familiarity with NIST SP 800-53 control families.
• Working knowledge of Apex and SOQL — enough to read code and interpret debug logs.
• Experience with Salesforce Shield, Event Monitoring, and SIEM integration.

#ZR