Senior Salesforce Architect

Atlas Management Services LLC; Arlington (VA); On-site; USD 171,000 - 209,000; Full time

Job summary

Atlas Management Services LLC in Arlington, VA is seeking a Senior Salesforce Architect to lead the technical vision and security architecture of our Salesforce environment, with direct reports of Salesforce Developer and Administrator. The candidate must be a U.S.

citizen eligible for Top Secret clearance and able to work onsite five days/week in Arlington, VA. You will design encryption, identity, access, and monitoring architectures and ensure compliance with NIST SP 800-53/171 and FedRAMP in

Qualifications

• 10+ years in enterprise software
• 6+ years architecting Salesforce solutions
• 3+ years in FedRAMP-authorized or equivalent
• Experience supporting an ATO and 3PAO assessments
• Fluency with NIST SP 800-53 in SaaS/PaaS contexts
• Strong Salesforce data model, security model, and governor limits
• Hands-on with Apex, LWC, SOQL/SOSL, and Flow
• Experience with enterprise integration patterns and middleware
• Knowledge of 508/WCAG constraints in design

Responsibilities

• Lead end-to-end solution architecture across Salesforce clouds and connected systems
• Design for Gov Cloud authorization boundaries and risk acceptance
• Produce architecture artifacts: data models, diagrams, and data flows
• Define org/environment strategy and sandbox provisioning
• Design for large data volumes and federal retention horizons
• Own SSP content related to Salesforce and security controls
• Lead during 3PAO assessments and remediation planning
• Manage POA&M items and ensure closure
• Enforce authorization boundary reviews for new packages and integrations
• Design encryption, identity, and audit/monitoring architectures

Skills

Salesforce Architecture

Security Architecture

FedRAMP

NIST SP 800-53/171

Apex

Lightning Web Components

SOQL/SOSL

3PAO Coordination

Public Sector

Tools

Environments & Deployments

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Arlington, VA, US

Salary: $190,000.00 Annually

Position Summary

The Senior Salesforce Architect leads the technical vision and the security architecture of our Salesforce environment. This role sits at the intersection of solution design and compliance: every architectural decision has an authorization consequence, and this person is accountable for both. This person will have the Salesforce Developer and Administrator as direct reports.

The candidate must be able to reason natively about control inheritance, boundary management, and the cost of an architectural choice measured in assessment effort as well as engineering effort.

Position Requirements:

U.S. citizenship, eligibility to obtain a Top Secret security clearance, and the ability to work onsite five days per week in Arlington, VA are required for this position.

Key Responsibilities

• Lead end-to-end solution architecture across Sales Cloud, Service Cloud, Public Sector Solutions, Experience Cloud, and connected systems within the accredited environment.
• Design explicitly against the Government Cloud authorized and interoperable product lists; maintain an internal register of which capabilities are available on our tier and which require risk acceptance.
• Produce and maintain architecture artifacts: logical and physical data models, system landscape diagrams, data flow diagrams (including the authorization boundary drawn on them), and integration sequence diagrams.
• Define org strategy, environment strategy, and the sandbox model — including how non-production environments are provisioned and what data may exist in them.
• Design for large data volumes and long federal retention horizons: indexing, skinny tables, archiving, and NARA-compliant records disposition.

Security Architecture & Authorization

• Responsible for the technical content of the System Security Plan (SSP) sections relating to the Salesforce environment; write and maintain control implementation narratives against NIST SP 800-53 and or NIST SP 800-171
• Serve as the technical lead during 3PAO assessments, agency security reviews, and annual assessments; respond to assessor findings and author remediation plans.
• Create and manage the Plan of Action and Milestones (POA&M) items assigned to the platform; drive them to closure on schedule.
• Govern the authorization boundary: define and enforce the review process for any new package, integration, connected app, or external service, including confirmation of the counterparty's FedRAMP status.
• Design the encryption architecture: Shield Platform Encryption, FIPS-validated cryptography, and key management strategy including Bring Your Own Key or Cache-Only Key Service where the agency requires key custody.
• Design the identity and access architecture: federation to the agency IdP, CAC/PIV and PIV-derived credential authentication, phishing-resistant MFA, and session management aligned to agency policy.
• Design audit and monitoring architecture: Event Monitoring, Setup Audit Trail retention, and log forwarding into the agency SIEM to satisfy continuous monitoring obligations.

Required Qualifications

• 10+ years in enterprise software, with 6+ years architecting Salesforce solutions and 3+ years in a FedRAMP-authorized or equivalently accredited environment.
• Demonstrated experience supporting an ATO: authoring or substantially contributing to SSP control narratives, participating in a 3PAO assessment, and owning POA&M remediation.
• Working fluency in NIST SP 800-53 control families as they apply to a SaaS/PaaS tenant
• Deep expertise in the Salesforce data model, sharing and security model, and platform governor limits.
• Strong hands-on background in Apex, Lightning Web Components, SOQL/SOSL, and Flow — enough to review code and challenge designs credibly.
• Experience with enterprise integration patterns and at least one middleware platform.
• Understanding of Section 508 and WCAG obligations as they constrain solution design.
• Excellent written communication. This role produces documents that auditors read; the writing standard is higher than in commercial work.
• U.S. citizenship and ability to obtain and maintain Top Secret clearance.

Certifications

Required: Salesforce Certified Application Architect or System Architect, or the underlying component certifications (Data Architect, Sharing & Visibility Architect, Integration Architect, Development Lifecycle & Deployment Architect).

Strongly preferred: Certified Technical Architect (CTA).

Preferred Qualifications

• Prior architecture work on a federal, DoD, or state agency Salesforce program with a named agency reference.
• Experience with Public Sector Solutions, Grants Management, Licensing/Permitting, or Case Management for government.
• Familiarity with Agentforce for Public Sector and the constraints on AI feature adoption in accredited environments.
• Experience with CMMC Level 2 or 3 readiness, IRS 1075, StateRAMP, or CJIS.