Lead Full Stack Security (Systems & Software) Engineering (GRC)

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Software Engineering Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience Join the team building the next-generation Security Assurance Governance, Risk, and Compliance (GRC) platform at Salesforce. As a lead full stack engineer, you own the architecture, technical roadmap, and delivery of the platform's core engines, including policy as code, compliance as code, automated evidence collection, telemetry and alerting, and risk evaluation. You guide distributed feature teams from concept through deployment and shape how AI coding assistants are used across the engineering organization to raise both speed and code quality. What You'll Actually Be Doing • Take technical ownership of complex, multi-system initiatives, driving architectural decisions, technical specifications, phase planning, and execution across the delivery lifecycle. • Architect resilient, cloud-native microservice architectures that process large-scale compliance telemetry, support automated evidence ingestion, and run low-latency risk evaluation engines. • Partner with Product Management, Security Architects, and GRC leaders to translate business and regulatory strategies into detailed technical roadmaps, milestones, and sprint backlogs. • Establish engineering standards, perform high-impact code and architecture reviews, enforce secure coding guidelines, and set rigorous continuous integration and continuous delivery (CI/CD) and testing benchmarks across the engineering organization. • Design and implement extensible Policy as Code and Compliance as Code engines, using Open Policy Agent (OPA) or custom evaluation frameworks, along with runtime platforms such as Cloud Security Posture Management (CSPM) and Endpoint Detection and Response (EDR) tools, that dynamically audit infrastructure and enterprise controls. • Constrain the outputs of AI coding assistants with declarative, machine-readable rules. • Lead the design of automated evidence collection pipelines that integrate with multi-cloud environments (Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP)), identity providers, enterprise security tools, CI/CD pipelines, ticketing systems, and corporate productivity applications such as Workday and NetSuite. • Build dynamic risk analysis engines and auditing interfaces that map continuous technical evidence against major regulatory standards, including National Institute of Standards and Technology (NIST) Special Publication 800-53, International Organization for Standardization (ISO) 27001, and System and Organization Controls (SOC) 2. • Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow, pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code. • Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale. • Contribute to building and maintaining shared system co