Job description

ADP is Hiring a Principal Cloud Security Architect - Google Cloud Platform (GCP) Position Summary: The Cyber Security Architecture (CSA) team within ADP’s Global Security Organization (GSO) is responsible for the research, design, and standardization of ADP's integrated global protection and security infrastructure. The CSA team is responsible for leading these efforts for ADP worldwide across a broad set of security disciplines providing an integrated security ecosystem to detect, defend, and respond to business impacting cyber and physical security, data protection, and fraud prevention. The CSA team must have strong skills in conducting technical analysis of security and business problems, as well as threats, incidents, investigations, and other general security related issues. We are seeking a Principal Cloud Security Architect to join our Cyber Security Architecture team and serve as a senior technical authority for securing cloud environments across the enterprise's Google Cloud Platform (GCP) and Microsoft Azure environment. This role will define and drive cloud security architecture, engineering standards, and security solutions across a complex global enterprise environment. The successful candidate will have deep hands-on expertise designing and implementing security capabilities in GCP and Azure, with the ability to translate enterprise security requirements into scalable, resilient, and practical technical architectures. The Principal Cloud Security Architect will partner closely with cloud engineering, infrastructure, application development, identity, network security, risk, and compliance teams. This is a highly technical role requiring strong architecture skills, technical leadership, and the ability to influence security outcomes across the ADP organization. Like what you see? Apply now! Learn more about ADP at tech.adp.com/careers Responsibilities: • Design and evolve the security architecture of GCP and other public clouds including configuration, threat protection, network security, data protection and Identity and Access Management. • Architect secure cloud landing zones, organizational structures, subscriptions/projects, accounts, policies, and governance models. • Define cloud data security architectures, including encryption, key management, secrets management, data classification, and protection of sensitive workloads. • Document security standards, requirements, and best practices for the use of GCP, Azure and other public clouds. • Architect secure connectivity and segmentation across cloud, on-premises, and hybrid environments. • Establish security architecture patterns, guardrails, controls, and engineering standards for GCP and Azure environments. • Providing internal security consulting services for ADP applications, and IT shared services in GCP and other public clouds. • Motivate and lead cross functional teams through effective communication, delegation, and prioritization. • Establish cloud security monitoring, logging, detection, and incident-response architectures in partnership with security operations teams. • Evaluate emerging cloud technologies and security capabilities and determine their applicability to enterprise environments. • Influence technology strategy and security roadmaps across a global enterprise and communicate complex technical risks and recommendations to senior leadership. To Succeed in This Role: • You'll have a bachelors degree or equivelent Preferred Experience: • 10+ years of experience in IT Security/cybersecurity, cloud security, security architecture, infrastructure security, or a closely related discipline. • 7+ years of hands-on experience designing and implementing cloud security solutions, with significant expertise in both GCP and Azure. • Demonstrated experience architecting security solutions for large-scale enterprise cloud environments. • Deep technical knowledge of GCP security architecture and services, including IAM, organization/resource hierarchy, VPC security, Organization Policy, VPC Service Controls, Cloud KMS, Security Command Center, Cloud Armor, logging, monitoring, and workload security. • Deep technical knowledge of Azure security architecture and services, including Entra ID, Azure Policy, Defender for Cloud, Key Vault, networking/security controls, Sentinel, Private Link, and workload security. • Strong understanding of cloud identity and access management, including least privilege, RBAC, privileged access, workload identities, service principals/service accounts, federation, and identity governance. • Strong understanding of cloud networking and security, including segmentation, firewalls, private connectivity, DNS, routing, ingress/egress controls, zero-trust architectures, and hybrid connectivity. • Experience designing security controls for containers, Kubernetes, serverless workloads, APIs, VMs, and cloud-native applications. • Strong understanding of cloud data protection, encryption, key management, secrets management, and data security architectures. • Hands-on experience with Infrastructure as Code and automation, preferably Terraform, and experience implementing security through policy-as-code, CI/CD pipelines, programming and scripting languages (Python, JavaScript, C#, C++) and proficiency in working with relational databases, as well as NoSQL databases. • Experience with cloud security posture management, vulnerability management, security logging, SIEM, threat detection, and incident response. • Excellent technical communication skills, with the ability to explain complex cloud security concepts to engineers, architects, security professionals, and executive stakeholders. • One or more advanced cloud/security certifications, such as Google Professional Cloud Security Engineer, Microsoft Certified: Cybersecurity Architect Expert, CISSP, CCSP, or equivalent. • Experience securing Kubernetes/GKE and AKS environments at enterprise scale. • Experience with security architecture for AI/ML and emerging cloud-native technologies. What are you waiting for? Apply today! Find out why people come to ADP and why they stay: youtu.be (ADA version: youtu.be ) #LI-SD4 #LI-Hybrid Base salary offers for this position may vary based on factors such as location, skills, and relevant experience. Some positions may include additional compensation in the form of bonus, equity or commissions. We offer the following benefits: Medical, Dental, Vision, Life Insurance, Matched Retirement Savings, Wellness Program, Short-and Long-Term Disability, Charitable Contribution Match, Holidays, Personal Days & Vacation, Paid Volunteer Time Off, and more. The compensation for this role is USD $123,400.00 - USD $303,800.00 / Year* *Actual compensation will not be less than the applicable minimum wage or minimum exempt salary requirement under federal, state and local laws. A little about ADP: We are a comprehensive global provider of cloud-based human capital management (HCM) solutions that unite HR, payroll, talent, time, tax and benefits administration and a leader in business outsourcing services, analytics, and compliance expertise. We believe our people make all the difference in cultivating a down-to-earth culture that embraces our core values, welcomes ideas, encourages innovation, and values belonging. We've received recognition for our work by many esteemed organizations, learn more at ADP Awards and Recognition . Diversity, Equity, Inclusion & Equal Employment Opportunity at ADP: ADP is committed to an inclusive, diverse and equitable workplace, and is further committed to providing equal employment opportunities regardless of any protected characteristic including: race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, protected veteran status or disability. Hiring decisions are based upon ADP’s operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, cooperation, and job performance. Ethics at ADP: ADP has a long, proud history of conducting business with the highest ethical standards and full compliance with all applicable laws. We also expect our people to uphold our values with the highest level of integrity and behave in a manner that fosters an honest and respectful workplace. Click jobs.adp.com to learn more about ADP’s culture and our full set of values.

Requirements

Must-haves

ADP is Hiring a Principal Cloud Security Architect - Google Cloud Platform (GCP)
Like what you see? Apply now!
Learn more about ADP at tech.adp.com/careers
Design and evolve the security architecture of GCP and other public clouds including configuration, threat protection, network security, data protection and Identity and Access Management.
Architect secure cloud landing zones, organizational structures, subscriptions/projects, accounts, policies, and governance models.
Define cloud data security architectures, including encryption, key management, secrets management, data classification, and protection of sensitive workloads.
Document security standards, requirements, and best practices for the use of GCP, Azure and other public clouds.
Architect secure connectivity and segmentation across cloud, on-premises, and hybrid environments.
Establish security architecture patterns, guardrails, controls, and engineering standards for GCP and Azure environments.
Providing internal security consulting services for ADP applications, and IT shared services in GCP and other public clouds.
Motivate and lead cross functional teams through effective communication, delegation, and prioritization.
Establish cloud security monitoring, logging, detection, and incident-response architectures in partnership with security operations teams.

Nice-to-haves

Demonstrated experience architecting security solutions for large-scale enterprise cloud environments.
Deep technical knowledge of Azure security architecture and services, including Entra ID, Azure Policy, Defender for Cloud, Key Vault, networking/security controls, Sentinel, Private Link, and workload security.
Strong understanding of cloud identity and access management, including least privilege, RBAC, privileged access, workload identities, service principals/service accounts, federation, and identity governance.
Strong understanding of cloud networking and security, including segmentation, firewalls, private connectivity, DNS, routing, ingress/egress controls, zero-trust architectures, and hybrid connectivity.
Experience designing security controls for containers, Kubernetes, serverless workloads, APIs, VMs, and cloud-native applications.
Strong understanding of cloud data protection, encryption, key management, secrets management, and data security architectures.
Experience with cloud security posture management, vulnerability management, security logging, SIEM, threat detection, and incident response.
Excellent technical communication skills, with the ability to explain complex cloud security concepts to engineers, architects, security professionals, and executive stakeholders.
One or more advanced cloud/security certifications, such as Google Professional Cloud Security Engineer, Microsoft Certified: Cybersecurity Architect Expert, CISSP, CCSP, or equivalent.
Experience securing Kubernetes/GKE and AKS environments at enterprise scale.
Experience with security architecture for AI/ML and emerging cloud-native technologies.
What are you waiting for? Apply today!

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

gcpazurekubernetesci/cdpythonjavascriptaiml

Platform: career-feeds
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

Wellness