Salesforce Security Engineer

Location: Brampton, ON, Hybrid, 2 days per week on-site
Language: Strong written and spoken English communication skills
Duration: 1-year contract, 7 hours per day

About the Opportunity

This is an opportunity to take on a highly specialized Salesforce security role within a complex public sector enterprise environment. Youll provide strategic guidance and hands‑on expertise across the design, configuration, deployment, and ongoing optimization of Salesforce capabilities, helping strengthen security, governance, and platform resilience.

Working closely with cybersecurity, IT solutions, platform administrators, audit stakeholders, and business teams, youll help establish a comprehensive Salesforce security and governance framework. Your work will directly shape secure development practices, vulnerability remediation, continuous monitoring, and future Salesforce implementations.

Whats In It for You

Youll step into a senior advisory role where your Salesforce security expertise will have meaningful enterprise-wide impact. This opportunity offers exposure to complex architecture, integrations, governance, DevSecOps, and security assessment work, along with the chance to mentor internal teams and influence long-term security standards.

Your Responsibilities

• Youll assess Salesforce security posture, identify vulnerabilities and develop prioritized remediation strategies.
• Youll enhance security standards using Secure by Design principles and strengthen governance across future Salesforce implementations.
• Youll review and optimize profiles, permission sets, roles, sharing rules, organization-wide defaults, field and record-level security, login policies, session controls, and MFA.
• Youll evaluate Salesforce Shield, IAM configurations including OAuth, SAML and SSO, integration security, and compliance controls.
• Youll implement or enhance static code, configuration scanning, continuous monitoring, auditing, and vulnerability management practices.
• Youll enforce secure Apex and LWC coding standards and help strengthen DevSecOps and SDLC processes, including vendor-provided code.
• Youll provide expert guidance, mentorship, training, and knowledge transfer to technical and business teams.

Skills and Qualifications

• 5+ years of enterprise Salesforce architecture, implementation, and end-to-end delivery experience, including at least three complex enterprise implementations.
• University or college education in Computer Science, Engineering, or a related field.
• Deep experience with Salesforce security architecture, governance, Salesforce Shield, vulnerability assessment, remediation, and security auditing.
• Hands‑on expertise with IAM technologies including OAuth, SAML, SSO, and MFA.
• Advanced secure Apex/LWC development experience, static code analysis, DevOps, DevSecOps, and SDLC practices.
• Strong knowledge of Salesforce access controls, integration security, risk mitigation, privacy, compliance, and secure API protocols.
• SDLC Foundation Certificate or higher, Salesforce Certified Application Architect, and Salesforce Certified Integration Architecture Designer are considered strong assets.

We appreciate the time and effort all applicants invest in their submissions. Please note that only candidates shortlisted for this role will be contacted directly. However, your profile will remain under consideration for future opportunities that align with your experience and career goals. All qualified applicants will receive fair consideration for employment. We welcome individuals of all backgrounds, experiences, and identities including those who identify as women, members of racialized groups, Indigenous Peoples, persons with disabilities, and 2SLGBTQIA+ communities. If you require an accommodation, please review our accessibility policy and reach out to our accessibility officer with any questions. Our human recruiters review all applications and always make the final hiring decision. On occasion, we also use AI-assisted tools to help review applications.