Sr Lead Network Security Engineer - Zero Trust

Job DescriptionADP is hiring a Senior Lead Network Security Engineer - Zero TrustAre you ready to help us design the future-state to secure our Data? Well, this may be the role for you. Ready to make your mark?We are seeking a Senior Lead Global Security Engineer to bring deep network engineering experience to ADP’s Global Security Organization (GSO)! Help govern and strengthen the Security Service Edge (SSE) controls that protect associates and servers' access to the internet and Saas applications. You will combine advanced troubleshooting with technical security governance of SASE platform (e.g. Palo Alto Networks Prisma Access, Zscaler, Fortinet) and associated firewall and proxy controls. This opportunity is designed for experienced network security engineers and architects who are ready to broaden their impact beyond direct network platform administration and shape a path into technical security governance. You will remain closely involved in traffic analysis, troubleshooting, policy assessment, and remediation validation while expanding your influence across enterprise security decisions. Working with infrastructure owners, you will define security requirements and drive corrective action through established change processes. Your knowledge of routing, traffic inspection, global policies, and access exceptions will inform security decisions, uncover gaps, and guide implementation by partner teams. Success requires technical credibility, attention to detail, and the ability to move people toward a shared resolution.Responsibilities include protecting the company and client data from exploitation or misuse, influencing and partnering with the network & cloud engineering teams to develop, deploy, and maintain security controls and services that protect ADP’s network infrastructure and traffic. This role serves in a leadership position that will continuously modernize ADP’s Internet policies, identifying weak control/policies and engineering relevant mitigating controls, that drive towards reducing operational risks associated with data in motion and at rest. Like what you see?Apply now!Learn more about ADP at tech.adp.com/careersWHAT YOU'LL DO:Key Responsibilities: Assess Secure Web Gateway (SWG), next-generation firewall, URL filtering, SaaS inline, and related SSE controls against ADP policies and standards; identify configuration, coverage, and enforcement gaps. Govern access exceptions, allow/block lists, inspection exclusions, and rule lifecycle reviews, confirming business justification, least privilege, accountable ownership, expiration, and evidence of approval. Evaluate new platform capabilities and vendor limitations; define acceptance criteria and validate that deployed controls achieve the intended security outcome. Lead assessments of enterprise internet egress, including firewalls used as forward proxies, explicit proxies, PAC configurations, and alternate routes serving associates and server workloads. Correlate traffic logs, policy configurations, identity, and application dependencies to identify access paths that produce inconsistent enforcement or bypass required SSE controls.Partner with Global Network Solutions (GNS) to rationalize legacy egress, close unauthorized access paths, and align approved exceptions with enterprise standards while preserving required business connectivity. Investigate complex access issues, suspected vulnerabilities, and control failures using packet captures, session and threat logs, policy matching, DNS analysis, and TLS inspection evidence. Lead technical triage with GNS, Digital Workspace Experience (DWE), security partners, application owners, and vendors; define containment and corrective actions, assign owners, and validate resolution. Use SaaS discovery, application risk signals, and data loss prevention (DLP) insights to identify unsanctioned applications, risky AI usage, and potential data exposure; coordinate investigation with accountable teams. Improve native SaaS discovery, categorization, and inline controls; connect findings to application intake, governance decisions, exception processes, and enforceable access requirements. Partner with SaaS Governance, AppSec, Privacy, and Legal to implement approved access decisions and location-specific requirements. Provide senior technical direction, mentor engineers and analysts, and improve the quality and consistency of team investigations without relying on direct reporting authority.Proactively convene working sessions and escalation calls, resolve competing priorities with sound judgment, and communicate immediate actions alongside longer-term corrective plans.Maintain accurate technical documentation, audit evidence, and metrics covering enforcement coverage, exception aging, alternate egress findings, and remediation progress; explain business impact to leadership. Drive the discovery and prioritization of remediation of data controls to meet audit, compliance and ADP’s network data protection requirements, policies, and standards. Ensure global data security network initiatives adhere to continually changing privacy and legal compliance requirements. Assess and evaluate end point and data security control effectiveness, and drive towards improved control effectiveness, consistency, and maturity across the organization.TO SUCCEED IN THIS ROLE: You'll have a bachelors degree or equivelent.Qualifications: 10+ years of progressive experience in network security engineering, security architecture, or related infrastructure security roles, including substantial hands-on enterprise troubleshooting and policy administration.Deep practical expertise with Palo Alto Networks, Zscaler, Netskope, Broadcom/Symantec, Fortinet, or comparable firewall, proxy, or SSE platforms; ability to apply that experience to Prisma Access.Strong grounding of TCP/IP, routing, NAT, DNS, TLS inspection, certificates, VPNs, endpoint connectivity, proxy architectures, and internet egress. Global Protect or comparable clients, explicit and transparent proxies, PAC files, and user-to-workload traffic flows.Experience managing global policy exceptions, URL categories, application controls, rule reviews, and least-privilege access; ability to distinguish policy intent from observed enforcement.Working knowledge of DLP, CASB/SaaS discovery, IDS/IPS, malware prevention and sandboxing such as Wildfire, protective DNS, threat intelligence, WAF, and DDoS controls, including how these layers interact.Strong understanding of data security, encryption, privacy-by-design, and secure logging and monitoring practices.Strong knowledge of security frameworks and standards (e.g., OWASP ASVS, SAMM, NIST 800-53, NIST CSF, ISO 27001, CIS Controls).Demonstrated ability to influence cross-functional teams, coordinate urgent technical investigations, and balance tactical response with strategic improvement.Ability to turn incomplete or conflicting evidence into a clear technical hypothesis, a defensible recommendation, and a verified remediation outcome.Excellent interpersonal and communication skills, emotional intelligence, disciplined follow-through, and close attention to technical and procedural detail.Preferred: Prisma Access or comparable SASE experience; SaaS discovery and AI governance; API/scripting automation; SIEM and ServiceNow experience; relevant security or networking certification. Operating and managing Palo Alto Networks SASE Solutions and Next-Generation Firewalls (NGFWs) and core product features.Relevant security certifications are a plus: CISSP, CISM, CCSP, CSSLP, CEH, SANS/GIAC certifications, or Network Security Certificates such as Palo Alto Networks Certified Network Security Administrator (PCNSA)YOU'LL LOVE WORKING HERE BECAUSE YOU CAN:Have courageous team collaboration. Courage comes from how associates are willing to have difficult conversations, speak up, be an owner, and challenge one another's ideas to net out the best solution.Deliver at epic scale. We deliver real user outcomes using strong judgment and good instincts. We're obsessed with the art of achieving simplicity with a focus on client happiness and productivity.Be surrounded by curious learners. We align ourselves with other smart people in an environment where we grow and elevate one another to the next level. We encourage our associates to listen, stay agile, and learn from mistakes.Act like an owner & doer. Mission-driven and committed to leading change, you will be encouraged to take on any challenge and solve complex problems. No tasks are beneath or too great for us. We are hands-on and willing to master our craft.Give back to others. Always do the right thing for our clients and our community and humbly give back to the community where we live and work. Support our associates in times of need through ADP's Philanthropic Foundation.Join a company committed to equality and equity. Our goal is to impact lasting change through our actions.What are you waiting for?Apply today!Find out why people come to ADP and why they stay: (ADA version: )Job Requirements#LI-SD4#LI-HybridJob DetailsJob Type: Full-TimeSalaried: Salaried]]>