Government Salesforce Security Architect

At CDW, we make it happen, together. Trust, connection, and commitment are at the heart of how we work together to deliver for our customers. It’s why we’re coworkers, not just employees. Coworkers who genuinely believe in supporting our customers and one another. We collectively forge our path forward with a level of commitment that speaks to who we are and where we’re headed. We’re proud to share our story and Make Amazing Happen at CDW.

Job Summary

Your role at CDW is pivotal to the company's mission, objectives, and reputation. As a Salesforce Security Architect, you will be instrumental in designing, developing, and executing comprehensive security architecture solutions. Your expertise will ensure alignment with modern cybersecurity design patterns, enabling CDW to stay ahead of current and emerging cyber threats.

You will lead the development of secure solution architectures across various domains, integrating multiple perspectives including business, application, data, and infrastructure across the enterprise. This role involves creating and maintaining security patterns for solution architectures, and collaborating with other architects to develop secure solution blueprints that adhere to security standards.

Additionally, you will provide critical decision support, guidance, and recommendations on project and program design deliverables. Working closely with technology, business, and development teams, you will offer security-related guidance to ensure that program and project architectures meet the applicable security standards for target-state architectures.

What you will do:

Your responsibilities include three parts:

• Salesforce Security Arch (Government Instances)
• Conduct regular controls testing, access reviews, API security, and validate with appropriate teams as needed.
• Monitor security posture and controls within the Salesforce environment (e.g., Key management, event logging and alerting, backup and restoration).
• Monitor security advisories as related to the Salesforce environments and installed packages.
• Monitor and act on security alerts triggered in the environment (Salesforce and packages).
• Review upgrade documentation to understand the implications of package upgrades and document as part of the security risk analysis.
• Participate in security incident management with all appropriate teams.
• Participate and be the Salesforce Security SME for Change Management.
• Participate in risk analysis for all packages (upgrades, new installations, etc.).
• Provide valuable insight and recommendations related to security solutions for the environment.
• Participate in tuning and optimizing security systems for the Salesforce environment (e.g., using and configuring Salesforce Shield for event monitoring, encryption, DLP, etc.).
• Document and maintain security procedures and processes for the environment (e.g., using and configuring Salesforce Shield for event monitoring, encryption, DLP, etc.).
• Stay up-to-date with emerging security threats, including applicable regulatory security requirements such as CMMC.
• Cybersecurity Capability & Solutions Innovation
• Collaborate with Leadership: Partner with the CISO and Global Information Security Leadership Team to continuously evaluate and rigorously test CDW’s CMMC compliance and Salesforce Govcloud.
• Innovate and Evaluate: Lead the discovery and evaluation of modern, innovative solutions with high potential to enhance CDW’s CMMC audit readiness.
• Assess and Recommend Enhancements: Drive and manage an ongoing assessment process to identify and recommend opportunities to accelerate CDW’s CMMC governance model
• Leadership and Mentorship
• Engage in Cross-Functional Collaboration: Collaborate and partner with other architects both within and outside of the Global Information Security team, fostering a culture of continuous improvement and innovation. Work together to integrate security best practices into broader architectural efforts.
• Mentor and Train Staff: Mentor junior architects and other IT staff, providing guidance and training to enhance their skills and knowledge in cybersecurity practices.

What we expect from you:

• Bachelor’s degree in business, technology, or a related field.
• At least 10 years’ experience in technology, with extensive knowledge of cybersecurity domains including Information Protection, Cloud Security, Networking Security.
• Experience with Salesforce and securing like environments.
• Experience with Salesforce Shield.
• Experience working in regulated environments and NIST SP 800-171r2, NIST SP 800-171A and DOD assessment methodology for NIST SP 800-171.
• Knowledge of architectural design and security engin