Technical Lead (Compliance Engineering & Automation)

Join Salesforce as a Technical Lead in Compliance Engineering & Automation. In this hands-on engineering role, you will lead the design, deployment, and scaling of compliance automation within Product Security. You will own the technical roadmap for encoding our Common Controls Framework (CCF) control environment as software, shifting compliance left and embedding it into engineering systems. You will also partner with compliance, product, and engineering teams to translate control requirements into precise data contracts and machine-readable policy definitions.

• Lead the design, deployment, and scaling of compliance automation within Product Security, treating compliance requirements as specifications.
• Own the technical roadmap for encoding the Common Controls Framework (CCF) control environment as software, including automated evidence pipelines and policy-as-code enforcement.
• Architect and operate continuous control monitoring, providing real-time dashboards backed by authoritative data pipelines.
• Familiarity with agentic or LLM-based workflows for automating unstructured tasks (inquiry response, evidence summarization, anomaly triage)
• Engineering-led approach to audit: you've replaced manual evidence collection with automated pipelines and can articulate how those systems satisfy auditor scrutiny
• Hands-on experience building automation with Apex and/or Java, Python, SQL, and SOQL; comfortable reading and writing production-grade code, not just directing others
• Experience building data pipelines and APIs that normalize compliance-relevant telemetry from multiple enterprise systems into a unified, queryable source of truth
• Deep familiarity with security control frameworks — specifically the ability to translate control language into testable, automatable specifications
• 8+ years in compliance engineering, security engineering, or software engineering — with 3+ years leading technical teams building compliance or security automation systems
• Experience with Compliance as Code or Policy as Code frameworks (OPA/Rego, Cedar, or similar); comfort expressing control logic as versioned, testable code
• Proficiency with the Salesforce platform and KARL for building compliance automation on native infrastructure
• Experience with shift-left compliance — integrating control gates into CI/CD pipelines, PRs, or infrastructure provisioning workflows rather than post-deployment audits
• Experience fine-tuning or prompt-engineering LLMs for structured compliance tasks: evidence mapping, natural language control summaries, or audit response generation
• Tableau or similar for compliance reporting — built by data engineers, consumed by auditors and executives
• Salesforce Certified Technical Architect (CTA), CISSP, or CISM