- Architecture & Design
- Define and implement DevSecOps frameworks, standards, and best practices for multi-cloud and Salesforce ecosystems.
- Design secure CI/CD pipelines for Salesforce (Core, Commerce Cloud, Marketing Cloud) and other enterprise platforms.
- Develop threat modeling strategies for applications and integrations.
- Salesforce & Deployment Tools
- Implement and optimize deployment strategies using Copado, Gearset, or similar Salesforce DevOps tools.
- Ensure secure version control and release management for Salesforce in shared workplace models.
- Integrate security checks into Salesforce deployment pipelines.
- Security Integration
- Embed security tools (SAST, DAST, SCA, container scanning) into build and deployment pipelines.
- Implement secrets management and secure configuration practices for Salesforce and connected systems.
- Enterprise Environment Expertise
- Proven success in managing DevSecOps practices across shared environment models.
- Experience delivering secure solutions for one or multiple enterprise accounts with complex governance.
- Automation & Tooling
- Select and integrate tools for code analysis, vulnerability scanning, and compliance checks.
- Drive Infrastructure as Code (IaC) security practices for cloud and hybrid environments.
- Collaboration & Governance
- Work closely with development, operations, and security teams to enforce secure coding standards.
- Establish security KPIs and dashboards for continuous monitoring.
- Provide guidance and training on DevSecOps principles.