Senior Salesforce Administrator

ADP, Inc.; Arlington (VA); On-site; USD 108,000 - 132,000; Full time

Job summary

ADP, Inc. in Arlington, VA seeks a Senior Salesforce Administrator to lead platform operations, access management, and audit logging in an accredited environment.

You will enforce NIST 800-53 controls, manage users and roles, build automations and dashboards, and support compliance through documented evidence and configuration controls.

Qualifications

• 5+ years as a Salesforce Administrator in a multi-team or enterprise org.
• Expert-level Flow Builder skills including debugging complex flows.
• Deep understanding of the Salesforce security and sharing model.
• Strong reporting and dashboard skills including cross-filters, bucketing, and joined reports.
• Meticulous documentation habits. In this environment, undocumented work is treated as work that did not happen.
• U.S. citizenship and ability to obtain and maintain Top Secret clearance.

Responsibilities

• Manage users, permission sets, permission set groups, roles, and public groups under a strict least-privilege model.
• Operate account lifecycle in lockstep with agency personnel actions: provisioning on documented authorization, immediate disablement on separation, and disabling inactive accounts within the interval our policy specifies.
• Conduct and document periodic access recertification; produce the evidence auditors will request.
• Manage privileged access: justify, document, and time-bound every elevated permission; no standing System Administrator access without documented approval.
• Monitor and preserve Setup Audit Trail, login history, and Event Monitoring data in line with retention requirements.
• Serve as a primary evidence provider during assessments, annual reviews, and continuous monitoring cycles: pull reports, produce screenshots, and explain configuration to assessors.
• Track and remediate configuration-related POA&M items.
• Run Security Health Check and Salesforce Optimizer on a defined cadence; investigate and remediate drift from the approved baseline.
• Support records management obligations: retention schedules, legal holds and eDiscovery requests.
• Responsible for day-to-day configuration: objects, fields, page layouts, record types, dynamic forms, list views, and Lightning app configuration.
• Build complex automation in Flow.
• Build reports and dashboards using Salesforce and Tableau that meet Section 508 requirements and respect data classification in their distribution.
• Validate that every configuration change respects the data classification of the records involved, including CUI marking and handling requirements where applicable.
• Manage change request intake: triage, estimate, prioritize, and route items requiring security review before work begins.
• Coordinate sandbox refreshes with attention to what data is permitted in non-production environments.
• Manage AppExchange evaluation through the security review and boundary-impact process.
• Maintain data quality: duplicate and matching rules, validation rules, and cleansing initiatives.
• Perform bulk operations with tooling approved for use in the environment, and with documented authorization for any operation touching sensitive data.
• Monitor storage consumption and execute archiving and disposition consistent with federal records retention schedules.

Skills

Salesforce Administrator

Flow Builder

Salesforce security model

Reports & Dashboards

Documentation

Apex

SOQL

Salesforce Shield

Event Monitoring

SIEM integration

Education

Advanced Administrator Certification

Platform App Builder Certification

Business Analyst Certification

Tools

Apex

SOQL

Salesforce Shield

Event Monitoring

SIEM integration

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Arlington, VA, US

Salary: $120,000.00 Annually

Position Summary

The Senior Salesforce Administrator is the operational lead for the platform and, in an accredited environment, a de facto security operator. Access management, audit logging, and account lifecycle in this role are direct implementations of NIST 800-53 controls.

Position Requirements:

U.S. citizenship, eligibility to obtain a Top Secret security clearance, and the ability to work onsite five days per week in Arlington, VA are required for this position.

Key Responsibilities

Access & Account Management (NIST 800-53 AC and IA families)

• Manage users, permission sets, permission set groups, roles, and public groups under a strict least-privilege model.
• Operate account lifecycle in lockstep with agency personnel actions: provisioning on documented authorization, immediate disablement on separation, and disabling inactive accounts within the interval our policy specifies.
• Conduct and document periodic access recertification; produce the evidence auditors will request.
• Manage privileged access: justify, document, and time-bound every elevated permission; no standing System Administrator access without documented approval.

Audit, Monitoring & Compliance Support

• Monitor and preserve Setup Audit Trail, login history, and Event Monitoring data in line with retention requirements.
• Serve as a primary evidence provider during assessments, annual reviews, and continuous monitoring cycles: pull reports, produce screenshots, and explain configuration to assessors.
• Track and remediate configuration-related POA&M items.
• Run Security Health Check and Salesforce Optimizer on a defined cadence; investigate and remediate drift from the approved baseline.
• Support records management obligations: retention schedules, legal holds and eDiscovery requests.

Platform Configuration

• Responsible for day-to-day configuration: objects, fields, page layouts, record types, dynamic forms, list views, and Lightning app configuration.
• Build complex automation in Flow.
• Build reports and dashboards using Salesforce and Tableau that meet Section 508 requirements and respect data classification in their distribution.
• Validate that every configuration change respects the data classification of the records involved, including CUI marking and handling requirements where applicable.

Change & Release Management

• Manage change request intake: triage, estimate, prioritize, and route items requiring security review before work begins.
• Coordinate sandbox refreshes with attention to what data is permitted in non-production environments.
• Manage AppExchange evaluation through the security review and boundary-impact process.

Data Management

• Maintain data quality: duplicate and matching rules, validation rules, and cleansing initiatives.
• Perform bulk operations with tooling approved for use in the environment, and with documented authorization for any operation touching sensitive data.
• Monitor storage consumption and execute archiving and disposition consistent with federal records retention schedules.

Required Qualifications

• 5+ years as a Salesforce Administrator in a multi-team or enterprise org.
• Expert-level Flow Builder skills including debugging complex flows and understanding order of execution.
• Deep understanding of the Salesforce security and sharing model.
• Strong reporting and dashboard skills including cross-filters, bucketing, and joined reports.
• Meticulous documentation habits. In this environment, undocumented work is treated as work that did not happen.
• U.S. citizenship and ability to obtain and maintain Top Secret clearance.

Certifications

Preferred: Advanced Administrator, Platform App Builder, Business Analyst.

Preferred Qualifications

• Prior administration in a FedRAMP, DoD, StateRAMP, or CJIS environment.
• Familiarity with NIST SP 800-53 control families.
• Working knowledge of Apex and SOQL - enough to read code and interpret debug logs.
• Experience with Salesforce Shield, Event Monitoring, and SIEM integration.