Job Description

ADP is Hiring a Principal Cloud Security Architect - Google Cloud Platform (GCP)

Position Summary

The Cyber Security Architecture (CSA) team within ADP’s Global Security Organization (GSO) is responsible for the research, design, and standardization of ADP's integrated global protection and security infrastructure. The CSA team is responsible for leading these efforts for ADP worldwide across a broad set of security disciplines providing an integrated security ecosystem to detect, defend, and respond to business impacting cyber and physical security, data protection, and fraud prevention. The CSA team must have strong skills in conducting technical analysis of security and business problems, as well as threats, incidents, investigations, and other general security related issues.

We are seeking a Principal Cloud Security Architect to join our Cyber Security Architecture team and serve as a senior technical authority for securing cloud environments across the enterprise's Google Cloud Platform (GCP) and Microsoft Azure environment.

This role will define and drive cloud security architecture, engineering standards, and security solutions across a complex global enterprise environment. The successful candidate will have deep hands-on expertise designing and implementing security capabilities in GCP and Azure, with the ability to translate enterprise security requirements into scalable, resilient, and practical technical architectures.

The Principal Cloud Security Architect will partner closely with cloud engineering, infrastructure, application development, identity, network security, risk, and compliance teams. This is a highly technical role requiring strong architecture skills, technical leadership, and the ability to influence security outcomes across the ADP organization.

Like what you see? Apply now!

Learn more about ADP at tech.adp.com/careers

Responsibilities

• Design and evolve the security architecture of GCP and other public clouds including configuration, threat protection, network security, data protection and Identity and Access Management.
• Architect secure cloud landing zones, organizational structures, subscriptions/projects, accounts, policies, and governance models.
• Define cloud data security architectures, including encryption, key management, secrets management, data classification, and protection of sensitive workloads.
• Document security standards, requirements, and best practices for the use of GCP, Azure and other public clouds.
• Architect secure connectivity and segmentation across cloud, on-premises, and hybrid environments.
• Establish security architecture patterns, guardrails, controls, and engineering standards for GCP and Azure environments.
• Providing internal security consulting services for ADP applications, and IT shared services in GCP and other public clouds.
• Motivate and lead cross functional teams through effective communication, delegation, and prioritization.
• Establish cloud security monitoring, logging, detection, and incident-response architectures in partnership with security operations teams.
• Evaluate emerging cloud technologies and security capabilities and determine their applicability to enterprise environments.
• Influence technology strategy and security roadmaps across a global enterprise and communicate complex technical risks and recommendations to senior leadership.

To Succeed in This Role:

• You'll have a bachelors degree or equivelent

Preferred Experience:

• 10+ years of experience in IT Security/cybersecurity, cloud security, security architecture, infrastructure security, or a closely related discipline.
• 7+ years of hands-on experience designing and implementing cloud security solutions, with significant expertise in both GCP and Azure.
• Demonstrated experience architecting security solutions for large-scale enterprise cloud environments.
• Deep technical knowledge of GCP security architecture and services, including IAM, organization/resource hierarchy, VPC security, Organization Policy, VPC Service Controls, Cloud KMS, Security Command Center, Cloud Armor, logging, monitoring, and workload security.
• Deep technical knowledge of Azure security architecture and services, including Entra ID, Azure Policy, Defender for Cloud, Key Vault, networking/security controls, Sentinel, Private Link, and workload security.
• Strong understanding of cloud identity and access management, including least privilege, RBAC, privileged access, workload identities, service principals/service accounts, federation, and identity governance.
• Strong understanding of cloud networking and security, including segmentation, firewalls, private connectivity, DNS, routing, ingress/egress controls, zero-trust architectures, and hybrid connectivity.
• Experience designing security controls for containers, Kubernetes, serverless workloads, APIs, VMs, and cloud-native applications.
• Strong understanding of cloud data protection, encryption, key management, secrets management, and data security architectures.
• Hands-on experience with Infrastructure as Code and automation, preferably Terraform, and experience implementing security through policy-as-code, CI/CD pipelines, programming and scripting languages (Python, JavaScript, C#, C++) and proficiency in working with relational databases, as well as NoSQL databases.
• Experience with cloud security posture management, vulnerability management, security logging, SIEM, threat detection, and incident response.
• Excellent technical communication skills, with the ability to explain complex cloud security concepts to engineers, architects, security professionals, and executive stakeholders.
• One or more advanced cloud/security certifications, such as Google Professional Cloud Security Engineer, Microsoft Certified: Cybersecurity Architect Expert, CISSP, CCSP, or equivalent.
• Experience securing Kubernetes/GKE and AKS environments at enterprise scale.
• Experience with security architecture for AI/ML and emerging cloud-native technologies.

What are you waiting for? Apply today!

Find out why people come to ADP and why they stay: https://youtu.be/ODb8lxBrxrY

(ADA version: https://youtu.be/IQjUCA8SOoA )

Qualifications

#LI-SD4

#LI-Hybrid

About ADP

A little about ADP: We are a comprehensive global provider of cloud-based human capital management (HCM) solutions that unite HR, payroll, talent, time, tax and benefits administration and a leader in business outsourcing services, analytics, and compliance expertise. We believe our people make all the difference in cultivating a down-to-earth culture that embraces our core values, welcomes ideas, encourages innovation, and values belonging. We've received recognition for our work by many esteemed organizations, learn more at ADP Awards and Recognition.Diversity, Equity, Inclusion & Equal Employment Opportunity at ADP: ADP is committed to an inclusive, diverse and equitable workplace, and is further committed to providing equal employment opportunities regardless of any protected characteristic including: race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, protected veteran status or disability. Hiring decisions are based upon ADP's operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, cooperation, and job performance. Ethics at ADP: ADP has a long, proud history of conducting business with the highest ethical standards and full compliance with all applicable laws. We also expect our people to uphold our values with the highest level of integrity and behave in a manner that fosters an honest and respectful workplace. Click https://jobs.adp.com/life-at-adp/ to learn more about ADP's culture and our full set of values.

To protect confidentiality and ensure a fair process, candidates may not use recording devices including but not limited to AI assisted tools to record or transcribe at any stage.

Beware of hiring scams. ADP will never request money, nor ask you to purchase equipment or services as part of our hiring process or ask you to submit personal information via text message when applying for a job at ADP. ADP email addresses end in @adp.com. To learn more, click here.