Assurance Engineering Platform Developer SMTS / LMTS

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Software Engineering Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience We are seeking a lead full stack engineer with enterprise software engineering experience to drive the architecture, technical roadmap, and execution for our next-generation Security Assurance Governance, Risk, and Compliance (GRC) platform. In this role, you will hold end-to-end technical ownership over the platform’s core engines—including policy as code, compliance as code, automated evidence collection, telemetry and alerting, and risk evaluation modules. Beyond hands-on development in Python, Java, and modern front-end frameworks, you will act as a primary technical leader: defining system architecture, scoping and planning multi-quarter technical initiatives, and guiding distributed feature teams from concept through deployment. You will also pioneer the team’s operational strategy around AI coding assistants (e.g., Claude, Gemini, OpenAI) to accelerate output and elevate code quality across the engineering organization. What You'll Actually Be Doing • End-to-End Ownership: Take technical ownership of complex, multi-system initiatives, driving architectural decisions, technical specifications, phase planning, and execution across the delivery lifecycle. • Architecture & System Design: Architect resilient, cloud-native microservice architectures that process large-scale compliance telemetry, support automated evidence ingestion, and execute low-latency risk evaluation engines. • Roadmap & Project Planning: Partner with Product Management, Security Architects, and GRC leaders to translate broad business and regulatory strategies into detailed technical roadmaps, milestones, and sprint backlogs. • Technical Governance: Establish engineering standards, perform high-impact code and architecture reviews, enforce secure coding guidelines, and institute rigorous CI/CD and testing benchmarks across the engineering org. • Policy & Governance as Code: Design and implement extensible Policy as Code and Compliance as Code engines (e.g., leveraging Open Policy Agent/OPA or custom evaluation frameworks) and runtime platforms (e.g. CSPM, EDR, etc) that dynamically audit infrastructure and enterprise controls. Constrain the outputs of AI coding assistants with declarative machine-readable rules. • Automated Evidence Collection: Lead the design of automated evidence collection pipelines integrating with multi-cloud environments (AWS, Azure, GCP), identity providers, enterprise security tools, CI/CD pipelines, ticketing systems, and productivity / corporate applications (Workday, Netsuite, etc). • Risk & Regulatory Modeling: Build dynamic risk analysis engines and auditing interfaces capable of mapping continuous technical evidence against major regulatory standards (NIST 800-53, ISO 27001, SOC 2). • AI-Assisted Engineering: Lead the adoption and integration of AI coding assistants (e.g., Claude, Gemini, OpenAI APIs) across the engineering lifecycle to optimize team productivity, automate test generation,