Sr Lead Network Security Engineer - Zero Trust

Job Description ADP is hiring a Senior Lead Network Security Engineer - Zero Trust Are you ready to help us design the future-state to secure our Data? Well, this may be the role for you. Ready to make your mark?

We are seeking a Senior Lead Global Security Engineer to bring deep network engineering experience to ADP’s Global Security Organization (GSO)! Help govern and strengthen the Security Service Edge (SSE) controls that protect associates and servers' access to the internet and Saas applications. You will combine advanced troubleshooting with technical security governance of SASE platform (e.g. Palo Alto Networks Prisma Access, Zscaler, Fortinet) and associated firewall and proxy controls.

This opportunity is designed for experienced network security engineers and architects who are ready to broaden their impact beyond direct network platform administration and shape a path into technical security governance. You will remain closely involved in traffic analysis, troubleshooting, policy assessment, and remediation validation while expanding your influence across enterprise security decisions. Working with infrastructure owners, you will define security requirements and drive corrective action through established change processes.

Your knowledge of routing, traffic inspection, global policies, and access exceptions will inform security decisions, uncover gaps, and guide implementation by partner teams. Success requires technical credibility, attention to detail, and the ability to move people toward a shared resolution.

Responsibilities include protecting the company and client data from exploitation or misuse, influencing and partnering with the network & cloud engineering teams to develop, deploy, and maintain security controls and services that protect ADP’s network infrastructure and traffic. This role serves in a leadership position that will continuously modernize ADP’s Internet policies, identifying weak control/policies and engineering relevant mitigating controls, that drive towards reducing operational risks associated with data in motion and e what you see?

Apply now!

Learn more about ADP at  YOU'LL DO:

Key Responsibilities:

Assess Secure Web Gateway (SWG), next-generation firewall, URL filtering, SaaS inline, and related SSE controls against ADP policies and standards; identify configuration, coverage, and enforcement gaps. Govern access exceptions, allow/block lists, inspection exclusions, and rule lifecycle reviews, confirming business justification, least privilege, accountable ownership, expiration, and evidence of approval. Evaluate new platform capabilities and vendor limitations; define acceptance criteria and validate that deployed controls achieve the intended security outcome.

Lead assessments of enterprise internet egress, including firewalls used as forward proxies, explicit proxies, PAC configurations, and alternate routes serving associates and server workloads. Correlate traffic logs, policy configurations, identity, and application dependencies to identify access paths that produce inconsistent enforcement or bypass required SSE controls.

Partner with Global Network Solutions (GNS) to rationalize legacy egress, close unauthorized access paths, and align approved exceptions with enterprise standards while preserving required business connectivity. Investigate complex access issues, suspected vulnerabilities, and control failures using packet captures, session and threat logs, policy matching, DNS analysis, and TLS inspection evidence. Lead technical triage with GNS, Digital Workspace Experience (DWE), security partners, application owners, and vendors;

define containment and corrective actions, assign owners, and validate resolution. Use SaaS discovery,…