Salesforce Customer Identity Solution Architect

About Virtido

Virtido is an entrepreneurial and innovative IT company headquartered in Zurich, Switzerland. We realize ideas and projects - from strategic concept to technical implementation closely alongside our dynamic clients with a strong focus on start-up or fast-growing companies. Since inception in 2015, we have grown rapidly to currently 140+ professionals in Switzerland, Poland, Ukraine and the Philippines.

About the client

Our Client is a leading data-driven customer experience management company that specializes in the delivery of unique, personalized customer experiences across platforms and devices. The company works with 12,000+ employees worldwide and has offices in Switzerland, Germany and Austria as well as locations in the Czech Republic, Serbia and Portugal.

About this role

We are looking for an experienced professional who has successfully delivered at least one end-to-end project replacing an existing CIAM/IdP system, ideally Auth0, with Salesforce Native Identity / Customer (External) Identity — including Experience Cloud, protocol setup, data and IdP migration, password hash strategy, coexistence phase, and a clean cutover. Client is a Swiss HQ global medium-sized player in the manufacturing business. There might be 1-2 requests for business trips to the office in Switzerland.
The expected time period is from the soonest possible start date until 31.01.2027.

Functional Requirements (Must-Have)

Salesforce Identity / Customer (External) Identity & CIAM

o Several years of proven experience with Salesforce Identity and Customer (External) Identity.

o Hands-on experience designing and implementing CIAM concepts for B2C/B2B scenarios, including SSO, MFA, social sign-on, and user lifecycle management.

Experience Cloud & Native Login/Registration
o Deep experience with Experience Cloud (Digital Experiences) as the front door for customer identities.

o Implementation of login and registration flows as well as self-registration using Login Flows, Flow Builder, and, where required, LWC/Apex handlers.

o Configuration and customization of password management and self-service capabilities.

Apex, LWC, SOQL & Flow Automation

o Very strong knowledge of Apex, Lightning Web Components (LWC), and SOQL.

o Experience with Flow-based automations for identity-related processes, including user provisioning, contact/account linking, consent, and lifecycle management.

Protocols & Connected Apps (OAuth 2.0, OpenID Connect, SAML, SCIM)

o Deep practical experience implementing OAuth 2.0, OpenID Connect, and SAML with Salesforce as both Identity Provider and Service Provider.

o Experience with Connected Apps, including scopes, token policies, session handling, and a basic understanding of SCIM for identity provisioning.

IdP Migration & Large-Scale Data Migration

o Proven experience migrating identities and user accounts from an external IdP, ideally Auth0 or alternatively Okta, Azure AD B2C, or a similar platform, to Salesforce.

o Hands-on experience with Bulk API, Data Loader, and ETL pipelines for migrating large data volumes.

o Sound understanding of password hash challenges and implementation of an appropriate migration strategy, such as lazy migration, coexistence, or staged cutover.

Duplicate / Matching Management & Data Quality

o Experience with Salesforce Duplicate / Matching Rules in an identity context, including Users, Contacts, and Person Accounts.

o Development of data quality mechanisms to prevent duplicates and ensure consistent customer identities.

Internationalization / Multilingual Support
o Experience internationalizing identity flows using Translation Workbench, locale handling, and language-specific login and registration pages.

Security & Datenschutz (OWASP, Secret-Handling, DSGVO/revDSG)

o Sicheres Software-Engineering im Identity-Umfeld (OWASP Top 10, Token-/Secret-Handling, Session-Management).

o Basic knowledge of privacy requirements, including GDPR and the revised Swiss FADP, specifically for identity, login, and registration processes such as consent, data minimization, and deletion concepts.

Proven Transition Experience

o At least one project in which an existing CIAM/IdP stack, preferably Auth0, was migrated to Salesforce Native Identity / Experience Cloud.

o End-to-end responsibility or a central role across architecture, implementation, migration, coexistence, and cutover.

Desired Skills (Nice-to-Have)

Auth0 Expertise

o Specific experience with Auth0, including Rules/Actions, Management API, user export, and tenant structure.

o Hands-on experience planning and executing an Auth0-to-Salesforce IdP migration.

Service Cloud / Case Management

o Understanding of how identity events, such as login issues, registration errors, or migration recipients, can be linked with Service Cloud / Case Management.

Integration & Middleware

o Experience with integration platforms such as MuleSoft or other middleware solutions.

o Secure REST API design in an identity context, including login/registration APIs, migration endpoints, and event-driven architectures.

E-Commerce Environment (B2B/B2C, Salesforce Commerce)

o Experience integrating identity into B2B/B2C commerce scenarios, ideally with Salesforce Commerce Cloud or Salesforce-based checkout solutions.

CI/CD for Salesforce

o Experience with SFDX, Git-based deployments, and CI/CD pipelines for identity-related changes, including configuration, Apex, LWC, and Flows.

Certifications (Desired)
Salesforce Platform Developer I / II
Salesforce Identity and Access Management Architect
Salesforce Experience Cloud Consultant