Jobs · Information Technology · Virginia

Senior Salesforce Administrator

Private Company · Arlington, VA · 1 mo ago
Information TechnologyFull-time

Position Summary

The Senior Salesforce Administrator is the operational lead for the platform and, in an accredited environment, a de facto security operator. Access management, audit logging, and account lifecycle in this role are direct implementations of NIST 800‑53 controls.

U.S. citizenship, eligibility to obtain a Top Secret security clearance, and the ability to work onsite five days per week in Arlington, VA are required for this position.

Key Responsibilities

  • Access & Account Management (NIST 800‑53 AC and IA families)
    • Manage users, permission sets, permission set groups, roles, and public groups under a strict least‑privilege model.
    • Operate account lifecycle in lockstep with agency personnel actions: provisioning on documented authorization, immediate disablement on separation, and disabling inactive accounts within the interval our policy specifies.
    • Conduct and document periodic access recertification; produce the evidence auditors will request.
    • Manage privileged access: justify, document, and time‑bound every elevated permission; no standing System Administrator access without documented approval.
  • Audit, Monitoring & Compliance Support
    • Monitor and preserve Setup Audit Trail, login history, and Event Monitoring data in line with retention requirements.
    • Serve as a primary evidence provider during assessments, annual reviews, and continuous monitoring cycles: pull reports, produce screenshots, and explain configuration to assessors.
    • Track and remediate configuration‑related POA&M items.
    • Run Security Health Check and Salesforce Optimizer on a defined cadence; investigate and remediate drift from the approved baseline.
    • Support records management obligations: retention schedules, legal holds and eDiscovery requests.
  • Platform Configuration
    • Responsible for day‑to‑day configuration: objects, fields, page layouts, record types, dynamic forms, list views, and Lightning app configuration.
    • Build complex automation in Flow.
    • Build reports and dashboards using Salesforce and Tableau that meet Section 508 requirements and respect data classification in their distribution.
    • Validate that every configuration change respects the data classification of the records involved, including CUI marking and handling requirements where applicable.
  • Change & Release Management
    • Manage change request intake: triage, estimate, prioritize, and route items requiring security review before work begins.
    • Coordinate sandbox refreshes with attention to what data is permitted in non‑production environments.
    • Manage AppExchange evaluation through the security review and boundary‑impact process.
  • Data Management
    • Maintain data quality: duplicate and matching rules, validation rules, and cleansing initiatives.
    • Perform bulk operations with tooling approved for use in the environment, and with documented authorization for any operation touching sensitive data.
    • Monitor storage consumption and execute archiving and disposition consistent with federal records retention schedules.

Required Qualifications

  • 5+ years as a Salesforce Administrator in a multi‑team or enterprise org.
  • Expert‑level Flow Builder skills including debugging complex flows and understanding order of execution.
  • Deep understanding of the Salesforce security and sharing model.
  • Strong reporting and dashboard skills including cross‑filters, bucketing, and joined reports.
  • Meticulous documentation habits; undocumented work is treated as work that did not happen.
  • U.S. citizenship and ability to obtain and maintain Top Secret clearance.
  • Salesforce Certified Administrator (required).

Preferred Qualifications

  • Prior administration in a FedRAMP, DoD, StateRAMP, or CJIS environment.
  • Familiarity with NIST SP 800‑53 control families.
  • Working knowledge of Apex and SOQL — enough to read code and interpret debug logs.
  • Experience with Salesforce Shield, Event Monitoring, and SIEM integration.
  • Additional certifications (preferred): Advanced Administrator, Platform App Builder, Business Analyst.

Similar jobs