Senior Security Engineer

We are seeking a highly experienced Senior Security Engineer to provide strategic guidance, technical governance, and expert cybersecurity oversight for enterprise Salesforce capabilities. In this role, you will lead the design, configuration, deployment, and optimization of Salesforce security architectures following "Secure by Design" principles. Working closely with cybersecurity leads, platform administrators, and audit teams, you will establish continuous vulnerability monitoring, enforce secure coding and API standards, perform comprehensive organization health assessments, and build actionable remediation roadmaps to mitigate platform risks.

Location: Toronto, ON

Duration: 12-month contract.



Advantages
Enterprise Security Ownership: Lead the complete security architecture and governance strategy for high-impact cloud platforms.

Next-Gen DevSecOps: Drive automated code scanning, API security standardization, and modern DevSecOps integration.

High Visibility Advisory: Partner directly with cybersecurity executives and platform leads to shape enterprise security policies.

Proactive Defense Focus: Perform org-wide health assessments and build end-to-end vulnerability remediation roadmaps.



Responsibilities
Security Standards & Governance: Establish, enhance, and enforce enterprise Salesforce security standards, governance frameworks, and "Secure by Design" principles.

Access Control & Identity Optimization: Review and optimize Profiles, Permission Sets, Roles, Sharing Rules, Organization-Wide Defaults, Field-Level Security, Session Controls, and Multi-Factor Authentication (MFA).

Vulnerability Assessment & Health Audits: Conduct comprehensive security posture assessments, code scans, and org health checks to identify access control, configuration, and compliance gaps.

Secure SDLC & DevSecOps: Enforce secure coding standards for Apex and Lightning Web Components (LWC), review vendor code, and standardize secure API integration protocols.

Remediation & Monitoring: Develop prioritized remediation roadmaps, implement continuous security monitoring processes, and maximize native Salesforce security and scanning tools.

Advisory & Knowledge Transfer: Provide expert security advisory services, mentor internal technical teams, and deliver knowledge transfer to ensure long-term platform sustainability.



Qualifications
Salesforce Security Architecture: Proven expertise in Salesforce security architecture, enterprise governance, and platform hardening (Strictly Required).

Security Assessment & Remediation: Extensive experience conducting org security assessments, configuration audits, and risk remediation (Strictly Required).

Secure Development & DevSecOps: Deep experience enforcing secure coding practices (Apex/LWC), static code analysis, and DevSecOps pipelines (Strictly Required).

Enterprise Implementation: Strong background in Salesforce architecture and multi-tier enterprise platform deployments (Strictly Required).

Identity & Access Management (IAM): Hands-on mastery of complex IAM models, role hierarchies, granular sharing rules, SSO, and MFA controls (Strictly Required).

Nice-to-Have Assets:
SDLC or advanced cybersecurity certifications.

Salesforce Certified Application Architect or Salesforce Certified Integration Architecture Designer certifications.



Summary
If you're interested in the "Senior Security Engineer" role based in Toronto, we encourage you to apply online at www.randstad.ca.
Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.