Principal Cloud Security Architect - Google Cloud Platform (GCP)

adpinternalcareers; Roseland (NJ); Hybrid; USD 180,000 - 240,000; Full time

Job summary

ADP is seeking a Principal Cloud Security Architect to lead cloud security architecture across Google Cloud Platform (GCP) and Microsoft Azure. The role partners with cloud engineering, identity, network security, risk, and compliance teams to translate security requirements into scalable architectures.

The candidate will design secure landing zones, data protection, encryption, and governance across a global enterprise, with emphasis on IAM, network security, and workload security in

Qualifications

• Bachelor's degree or equivalent.
• 10+ years IT Security/Cybersecurity experience.
• 7+ years hands-on cloud security design in GCP and Azure.

Responsibilities

• Design and evolve the security architecture of GCP and other public clouds.
• Architect secure cloud landing zones, org structures, subscriptions/projects, policies.
• Define cloud data security architectures including encryption and key management.
• Document security standards for GCP, Azure and public clouds.
• Lead cross-functional teams and communicate security risk to leadership.

Skills

Cloud security

GCP

Azure

IAM

Networking

Kubernetes

Security architecture

CI/CD

Terraform

Programming (Python, JavaScript, C#, C

Education

Bachelor's degree or equivalent

Tools

Terraform

Job description

ADP is Hiring aPrincipal Cloud Security Architect - Google Cloud Platform (GCP)

Position Summary:

The Cyber Security Architecture (CSA) team within ADP’s Global Security Organization (GSO) is responsible for the research, design, and standardization of ADP's integrated global protection and security infrastructure. The CSA team is responsible for leading these efforts for ADP worldwide across a broad set of security disciplines providing an integrated security ecosystem to detect, defend, and respond to business impacting cyber and physical security, data protection, and fraud prevention. The CSA team must have strong skills in conducting technical analysis of security and business problems, as well as threats, incidents, investigations, and other general security related issues.

We are seeking a Principal Cloud Security Architect to join our Cyber Security Architecture team and serve as a senior technical authority for securing cloud environments across the enterprise's Google Cloud Platform (GCP) and Microsoft Azure environment.
This role will define and drive cloud security architecture, engineering standards, and security solutions across a complex global enterprise environment. The successful candidate will have deep hands-on expertise designing and implementing security capabilities in GCP and Azure, with the ability to translate enterprise security requirements into scalable, resilient, and practical technical architectures.
The Principal Cloud Security Architect will partner closely with cloud engineering, infrastructure, application development, identity, network security, risk, and compliance teams. This is a highly technical role requiring strong architecture skills, technical leadership, and the ability to influence security outcomes across the ADP organization.

Responsibilities:

• Design and evolve the security architecture of GCP and other public clouds including configuration, threat protection, network security, data protection and Identity and Access Management.
• Architect secure cloud landing zones, organizational structures, subscriptions/projects, accounts, policies, and governance models.
• Define cloud data security architectures, including encryption, key management, secrets management, data classification, and protection of sensitive workloads.
• Document security standards, requirements, and best practices for the use of GCP, Azure and other public clouds.
• Architect secure connectivity and segmentation across cloud, on-premises, and hybrid environments.
• Establish security architecture patterns, guardrails, controls, and engineering standards for GCP and Azure environments.
• Providing internal security consulting services for ADP applications, and IT shared services in GCP and other public clouds.
• Motivate and lead cross functional teams through effective communication, delegation, and prioritization.
• Establish cloud security monitoring, logging, detection, and incident-response architectures in partnership with security operations teams.
• Evaluate emerging cloud technologies and security capabilities and determine their applicability to enterprise environments.
• Influence technology strategy and security roadmaps across a global enterprise and communicate complex technical risks and recommendations to senior leadership.

To Succeed in This Role:

• You'll have a bachelors degree or equivelent

Preferred Experience:

• 10+ years of experience in IT Security/cybersecurity, cloud security, security architecture, infrastructure security, or a closely related discipline.
• 7+ years of hands-on experience designing and implementing cloud security solutions, with significant expertise in both GCP and Azure.
• Demonstrated experience architecting security solutions for large-scale enterprise cloud environments.
• Deep technical knowledge of GCP security architecture and services, including IAM, organization/resource hierarchy, VPC security, Organization Policy, VPC Service Controls, Cloud KMS, Security Command Center, Cloud Armor, logging, monitoring, and workload security.
• Deep technical knowledge of Azure security architecture and services, including Entra ID, Azure Policy, Defender for Cloud, Key Vault, networking/security controls, Sentinel, Private Link, and workload security.
• Strong understanding of cloud identity and access management, including least privilege, RBAC, privileged access, workload identities, service principals/service accounts, federation, and identity governance.
• Strong understanding of cloud networking and security, including segmentation, firewalls, private connectivity, DNS, routing, ingress/egress controls, zero-trust architectures, and hybrid connectivity.
• Experience designing security controls for containers, Kubernetes, serverless workloads, APIs, VMs, and cloud-native applications.
• Strong understanding of cloud data protection, encryption, key management, secrets management, and data security architectures.
• Hands-on experience with Infrastructure as Code and automation, preferably Terraform, and experience implementing security through policy-as-code, CI/CD pipelines, programming and scripting languages (Python, JavaScript, C#, C++) and proficiency in working with relational databases, as well as NoSQL databases.
• Experience with cloud security posture management, vulnerability management, security logging, SIEM, threat detection, and incident response.
• Excellent technical communication skills, with the ability to explain complex cloud security concepts to engineers, architects, security professionals, and executive stakeholders.
• One or more advanced cloud/security certifications, such as Google Professional Cloud Security Engineer, Microsoft Certified: Cybersecurity Architect Expert, CISSP, CCSP, or equivalent.
• Experience securing Kubernetes/GKE and AKS environments at enterprise scale.
• Experience with security architecture for AI/ML and emerging cloud-native technologies.

Find out why people come to ADP and why they stay: https://youtu.be/ODb8lxBrxrY

(ADA version: https://youtu.be/IQjUCA8SOoA )

#LI-SD4

#LI-Hybrid