Job Description

Position Summary

The Senior Salesforce Administrator is the operational lead for the platform and, in an accredited environment, a de facto security operator. Access management, audit logging, and account lifecycle in this role are direct implementations of NIST 800-53 controls.

Position Summary

The Senior Salesforce Administrator is the operational lead for the platform and, in an accredited environment, a de facto security operator. Access management, audit logging, and account lifecycle in this role are direct implementations of NIST 800-53 controls.

Position Requirements

U.S. citizenship, eligibility to obtain a Top Secret security clearance, and the ability to work onsite five days per week in Arlington, VA are required for this position.

Key Responsibilities

Access & Account Management (NIST 800-53 AC and IA families)

• Manage users, permission sets, permission set groups, roles, and public groups under a strict least-privilege model.
• Operate account lifecycle in lockstep with agency personnel actions: provisioning on documented authorization, immediate disablement on separation, and disabling inactive accounts within the interval our policy specifies.
• Conduct and document periodic access recertification; produce the evidence auditors will request.
• Manage privileged access: justify, document, and time-bound every elevated permission; no standing System Administrator access without documented approval.

Audit, Monitoring & Compliance Support

• Monitor and preserve Setup Audit Trail, login history, and Event Monitoring data in line with retention requirements.
• Serve as a primary evidence provider during assessments, annual reviews, and continuous monitoring cycles: pull reports, produce screenshots, and explain configuration to assessors.
• Track and remediate configuration-related POA&M items.
• Run Security Health Check and Salesforce Optimizer on a defined cadence; investigate and remediate drift from the approved baseline.
• Support records management obligations: retention schedules, legal holds and eDiscovery requests.

Platform Configuration

• Responsible for day-to-day configuration: objects, fields, page layouts, record types, dynamic forms, list views, and Lightning app configuration.
• Build complex automation in Flow.
• Build reports and dashboards using Salesforce and Tableau that meet Section 508 requirements and respect data classification in their distribution.
• Validate that every configuration change respects the data classification of the records involved, including CUI marking and handling requirements where applicable.

Change & Release Management

• Manage change request intake: triage, estimate, prioritize, and route items requiring security review before work begins.
• Coordinate sandbox refreshes with attention to what data is permitted in non-production environments.
• Manage AppExchange evaluation through the security review and boundary-impact process.

Data Management

• Maintain data quality: duplicate and matching rules, validation rules, and cleansing initiatives.
• Perform bulk operations with tooling approved for use in the environment, and with documented authorization for any operation touching sensitive data.
• Monitor storage consumption and execute archiving and disposition consistent with federal records retention schedules.

Required Qualifications

• 5+ years as a Salesforce Administrator in a multi-team or enterprise org.
• Expert-level Flow Builder skills including debugging complex flows and understanding order of execution.
• Deep understanding of the Salesforce security and sharing model.
• Strong reporting and dashboard skills including cross-filters, bucketing, and joined reports.
• Meticulous documentation habits. In this environment, undocumented work is treated as work that did not happen.
• U.S. citizenship and ability to obtain and maintain Top Secret clearance.

Certifications

Required: Salesforce Certified Administrator.

Preferred: Advanced Administrator, Platform App Builder, Business Analyst.

Preferred Qualifications

• Prior administration in a FedRAMP, DoD, StateRAMP, or CJIS environment.
• Familiarity with NIST SP 800-53 control families.
• Working knowledge of Apex and SOQL — enough to read code and interpret debug logs.
• Experience with Salesforce Shield, Event Monitoring, and SIEM integration.

#ZR

Job Tags

Similar Jobs