Salesforce IT Architect

At Harrison McMillan, our mission is simple: to change lives, one placement at a time

As a trusted recruitment partner to government and industry, we pride ourselves on connecting exceptional people with roles where they can truly make an impact
 

Job details

The Commercial Application Delivery Section within the Business Solutions Branch of DFAT’s Information Management and Technology Division has a requirement for a labour hire resource to fill the role of  Salesforce Security Architect  to lead the design and implementation of Salesforce security architecture, ensuring alignment with departmental security policies, frameworks, and compliance requirements. This work will include the provision of Security assurance for DFAT’s Salesforce project and Salesforce applications in sustainment. It will also include working closely with the Cyber Assurance and Architecture section to ensure Salesforce projects continue to deliver compliant applications.

Specialist Salesforce skills are sought in the following key technology areas:

• be an innovative Salesforce security professional who can assist the department in moving workloads on the Salesforce platform;
• be able to interpret the impacts of cloud policy changes across Government and determine how these apply to the Department’s Salesforce implementation;
• thrive in a fast-paced environment;
• manage and identify risks and ensure adoption and adherence to standards;
• investigate major breaches of security, and recommend appropriate control improvements;
• ensure architectural principles are applied during design to reduce risk. Drive adoption and adherence to policy, standards and guidelines;
• provide advice and guidance to ensure adoption of and adherence to information assurance architectures, strategies, policies, standards and guidelines;
• plan, organise and conduct information assurance and accreditation of complex domains areas, cross-functional areas, and across the supply chain;
• have 5+ years of Salesforce architecture experience, working with complex security requirements;
• have experience with Salesforce Shield Platform;
• have the ability to communicate complex topics to an audience with varying level of Cloud and Salesforce functional and security knowledge;
• have experience with SPLUNK;
• hold and maintain minimum NV1 security clearance recognized by DFAT;
• guide on the development and execution of an innovative Salesforce security strategy;
• be able to demonstrate innovative compliance approaches in non-traditional IT environments (cloud);
• have experience with Salesforce’s Service Cloud and Public Sector Services Cloud;
• manage the Salesforce platform enablement team for continuous improvement of common components and security posture; and
• facilitate the Technical Architecture Governance forum.

Key duties and responsibilities

Job Specific role description:

• As a Salesforce Security Architect, you will provide expert advice and governance to build secure solutions to meet the department’s business and compliance requirements within a project delivery team. You will collaborate with Solution Leads, Enterprise Architects and security stakeholders to ensure security architecture is embedded into all solution designs. You will ensure out-of-the-box security features and platform capabilities are leveraged to maximize value, sustainability, and compliance, while maintaining best practice when implementing advanced security controls.
• You will work closely with business analysts, developers, testers, administrators and release managers to ensure solutions and processes meet security, quality, and compliance requirements. You will also ensure secure design principles are upheld throughout the DevOps lifecycle, including build, test, and deployment stages.

This is a delivery and ongoing assurance role, with the following responsibilities:

• Participate in the planning and analysis of business requirements, ensuring security considerations are embedded in all system changes and enhancements.
• Remain current with Salesforce security technologies, government cloud policies, and industry best practices.
• Translate solution designs into secure configurations and architecture patterns, aligned with development, security, and governance standards.
• Apply Salesforce security capabilities including Shield (encryption, event monitoring, audit trail), identity and access management, and data protection controls.
• Identify, assess, and manage security risks, ensuring adherence to departmental policies, standards, and guidelines.
• Investigate security incidents or breaches and recommend appropriate control improvements.
• Support quality assurance and release management operations to ensure security controls are tested, validated, and maintained throughout deployments.
• Plan and conduct information assurance and accreditation activities across complex and cross-functional environments.
• Facilitate and contribute to Technical Architecture Governance forums, ensuring alignment with enterprise security architecture.
• Manage the Platform Enablement team, to sustain and continuously improve the Salesforce platform and common components, and ensure compliance to Cyber Security controls;
• Provide clear and actionable advice to technical and non-technical stakeholders on security risks, controls, and compliance requirements.
• Produce security architecture, risk, and compliance documentation as required by the project.

The Skills Framework for the Information Age (SFIA) has been used to inform the requirements. In summary, DFAT seeks suitable candidates with the following relevant skillsets:

Skills/Levels:

• Salesforce Security Architect - Strategy and Architecture - Information Security (SCTY) - Level 5
• Salesforce Security Architect - Strategy and Architecture - Information ssurance (INAS) - Level 5

Criteria

Essential criteria

• 1.• Minimum 5+ years of experience in Salesforce architecture, with a strong focus on security in complex environments.

• 2.• Have specialist ICT skills in the following: i. Proven experience designing and implementing secure, enterprise-level Salesforce solutions in regulated or government environments. ii. Strong expertise in Salesforce security model, including roles, profiles, permission sets, sharing rules, and data visibility. iii. Demonstrated experience with Salesforce Shield Platform (encryption, event monitoring, audit capabilities). iv. Experience in managing identity and access controls, including SSO and multi-factor authentication integrations. v. Experience interpreting and applying government cloud and security policies to Salesforce implementations. vi. Experience with SPLUNK or equivalent security monitoring and analytics tools. vii. Strong understanding of Salesforce best practices, security governance, and compliance frameworks.

• 3.• Proven ability to communicate complex security concepts to audiences with varying levels of technical expertise.

• 4.• Proven ability to drive adherence to architecture principles, standards, and governance frameworks.

• 5.• Minimum NV1 security clearance.

• 6.• Ability to work 5 days in Canberra office.

Desirable criteria

• 1.• Understanding of Dev Ops, in particular Salesforce releases through Azure Dev Ops pipeline.

• 2.• Strong understanding of other cloud-based SaaS solutions, including the design and delivery of secure, compliant architectures, as well as DevOps practices and supporting operational processes.

This role is a 12-month initial contract with 2x12 months extension options, and requires a NV1 clearance