Salesforce Platform Security & Operations Engineer

You will join a project supporting a highly complex Salesforce ecosystem with multiple integrations and custom solutions. The environment is business-critical and requires a strong awareness of security, data protection, and production risk. The team operates in close cooperation with client security, architecture, and development teams.

• Senior-level experience as a Salesforce Administrator, preferably in large, complex, business-critical environments
• Strong understanding of Salesforce security, access management, and platform governance
• Practical knowledge of SOQL and Salesforce admin/support tools (e.g. Salesforce Inspector, Developer Workbench)
• Experience with certificate-based integrations and authentication mechanisms
• Familiarity with security and monitoring tools such as password managers (e.g. Bitwarden), monitoring platforms (e.g. Dynatrace), and WAF concepts
• Ability to deploy metadata between Salesforce orgs when standard CI/CD pipelines are not applicable
• High level of independence, ownership, and awareness of production risk
• Good communication skills in English and ability to work closely with architects, developers, DevOps, and client security teams

• Administer complex Salesforce production orgs and sandboxes, including environments with multiple integrations and custom solutions
• Perform configuration changes directly on production orgs, assessing business and technical risk in cooperation with Salesforce Architects
• Manage certificates (self-signed and CA-signed) used in Salesforce integrations, including renewals and impact analysis
• Design, configure, and maintain access models for users and integrations (profiles, permission sets, external client apps)
• Advise project teams on Salesforce security best practices, access management, and compliance requirements
• Support production incident resolution related to Salesforce, integrations, security, and data protection
• Plan and coordinate production changes (e.g. certificate renewals, access changes), including service windows and stakeholder communication
• Proactively identify gaps in requirements and ensure alignment with corporate security policies and cross-system standards