Sr Lead Network Security Engineer - Zero Trust

Well, this may be the role for you. Ready to make your mark?

We are seeking a Senior Lead Global Security Engineer to bring deep network engineering experience to ADP's Global Security Organization (GSO)! Help govern and strengthen the Security Service Edge (SSE) controls that protect associates and servers' access to the internet and Saas applications. You will combine advanced troubleshooting with technical security governance of SASE platform (e.g. Palo Alto Networks Prisma Access, Zscaler, Fortinet) and associated firewall and proxy controls.

This opportunity is designed for experienced network security engineers and architects who are ready to broaden their impact beyond direct network platform administration and shape a path into technical security governance. You will remain closely involved in traffic analysis, troubleshooting, policy assessment, and remediation validation while expanding your influence across enterprise security decisions. Working with infrastructure owners, you will define security requirements and drive corrective action through established change processes.

Your knowledge of routing, traffic inspection, global policies, and access exceptions will inform security decisions, uncover gaps, and guide implementation by partner teams. Success requires technical credibility, attention to detail, and the ability to move people toward a shared resolution.

Responsibilities include protecting the company and client data from exploitation or misuse, influencing and partnering with the network & cloud engineering teams to develop, deploy, and maintain security controls and services that protect ADP's network infrastructure and traffic. This role serves in a leadership position that will continuously modernize ADP's Internet policies, identifying weak control/policies and engineering relevant mitigating controls, that drive towards reducing operational risks associated with data in motion and at rest.

• Assess Secure Web Gateway (SWG), next-generation firewall, URL filtering, SaaS inline, and related SSE controls against ADP policies and standards; identify configuration, coverage, and enforcement gaps. Govern access exceptions, allow/block lists, inspection exclusions, and rule lifecycle reviews, confirming business justification, least privilege, accountable ownership, expiration, and evidence of approval. Evaluate new platform capabilities and vendor limitations; define acceptance criteria and validate that deployed controls achieve the intended security outcome.
• Network Egress & Proxy Security Lead assessments of enterprise internet egress, including firewalls used as forward proxies, explicit proxies, PAC configurations, and alternate routes serving associates and server workloads. Correlate traffic logs, policy configurations, identity, and application dependencies to identify access paths that produce inconsistent enforcement or bypass required SSE controls. Partner with Global Network Solutions (GNS) to rationalize legacy egress, close unauthorized access paths, and align approved exceptions with enterprise standards while preserving required business connectivity.
• Advanced Troubleshooting & Remediation Investigate complex access issues, suspected vulnerabilities, and control failures using packet captures, session and threat logs, policy matching, DNS analysis, and TLS inspection evidence. Lead technical triage with GNS, Digital Workspace Experience (DWE), security partners, application owners, and vendors; define containment and corrective actions, assign owners, and validate resolution.
• Shadow SaaS & AI Application Governance Use SaaS discovery, application risk signals, and data loss prevention (DLP) insights to identify unsanctioned applications, risky AI usage, and potential data exposure; coordinate investigation with accountable teams. Improve native SaaS discovery, categorization, and inline controls; connect findings to application intake, governance decisions, exception processes, and enforceable access requirements. Partner with SaaS Governance, App Sec, Privacy, and Legal to implement approved access decisions and location-specific requirements.
• Technical Leadership & Communication Provide senior technical direction, mentor engineers and analysts, and improve the quality and consistency of team investigations without…