Senior Salesforce Administrator

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Arlington, VA, US

Salary: $ Annually

The Senior Salesforce Administrator is the operational lead for the platform and, in an accredited environment, a de facto security operator. Access management, audit logging, and account lifecycle in this role are direct implementations of NIST 800-53 controls.

U.S. citizenship, eligibility to obtain a Top Secret security clearance, and the ability to work onsite five days per week in Arlington, VA are required for this position.

• Manage users, permission sets, permission set groups, roles, and public groups under a strict least-privilege model.
• Operate account lifecycle in lockstep with agency personnel actions: provisioning on documented authorization, immediate disablement on separation, and disabling inactive accounts within the interval our policy specifies.
• Conduct and document periodic access recertification; produce the evidence auditors will request.
• Manage privileged access: justify, document, and time-bound every elevated permission; no standing System Administrator access without documented approval.

• Monitor and preserve Setup Audit Trail, login history, and Event Monitoring data in line with retention requirements.
• Serve as a primary evidence provider during assessments, annual reviews, and continuous monitoring cycles: pull reports, produce screenshots, and explain configuration to assessors.
• Track and remediate configuration-related POA&M items.
• Run Security Health Check and Salesforce Optimizer on a defined cadence; investigate and remediate drift from the approved baseline.
• Support records management obligations: retention schedules, legal holds and eDiscovery requests.

• Responsible for day-to-day configuration: objects, fields, page layouts, record types, dynamic forms, list views, and Lightning app configuration.
• Build complex automation in Flow.
• Build reports and dashboards using Salesforce and Tableau that meet Section 508 requirements and respect data classification in their distribution.
• Validate that every configuration change respects the data classification of the records involved, including CUI marking and handling requirements where applicable.

• Manage change request intake: triage, estimate, prioritize, and route items requiring security review before work begins.
• Coordinate sandbox refreshes with attention to what data is permitted in non-production environments.
• Manage App Exchange evaluation through the security review and boundary-impact process.

• Maintain data quality: duplicate and matching rules, validation rules, and cleansing initiatives.
• Perform bulk operations with tooling approved for use in the environment, and with documented authorization for any operation touching sensitive data.
• Monitor storage consumption and execute archiving and disposition consistent with federal records retention schedules.

• 5+ years as a Salesforce Administrator in a multi-team or enterprise org.
• Expert-level Flow Builder skills including debugging complex flows and understanding order of execution.
• Deep understanding of the Salesforce security and sharing model.
• Strong reporting and dashboard skills including cross-filters, bucketing, and joined reports.
• Meticulous documentation habits. In this environment, undocumented work is treated as work that did not happen.
• U.S. citizenship and ability to obtain and maintain Top Secret clearance.

Preferred:
Advanced Administrator, Platform App Builder, Business Analyst.

• Prior administration in a FedRAMP, DoD, StateRAMP, or CJIS environment.
• Familiarity with NIST SP 800-53 control families.
• Working knowledge of Apex and SOQL - enough to read code and interpret debug logs.
• Experience with Salesforce Shield, Event Monitoring, and SIEM integration.