Senior Application Security Architect

ADP; Roseland (NJ); On-site; USD 107,000 - 264,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life Insurance

Retirement Savings Match

Wellness Program

Disability Insurance

Holidays

Job summary

ADP, a global leader in cloud-based human capital management solutions, is seeking a Senior Application Security Architect to secure ADP's ecosystem. You will collaborate with product, engineering, and cloud teams to design secure application architectures, influence secure-by-design decisions, and advance security maturity across the SDLC.

You will guide GenAI/LLM security, review cloud security controls, and lead secure integration of third-party SaaS, ensuring compliance with industry

Qualifications

• Bachelor’s degree in computer science, Information Security, Engineering, or related field (or equivalent).
• 8+ years of experience in Application Security, Security Architecture, or related roles.
• Deep expertise in secure coding, API security, microservices, cloud app security, DevSecOps, and security scanning tools.
• Strong knowledge of GenAI / LLM / AI security, data governance, prompt injection risks, and secure integration patterns.
• Strong knowledge of cloud platforms (AWS/Azure/OCI/GCP) security capabilities and controls.
• Familiarity with security frameworks (OWASP ASVS, NIST 800-53, NIST CSF, ISO 27001, CIS Controls).
• Experience with Threat Modeling tools (IriusRisk, ThreatModeler, MS Threat Modeling Tool).
• IAM, OAuth2/OIDC, JWT, secrets management, zero-trust design principles.
• CI/CD pipeline security & infrastructure-as-code security.
• Excellent communication and stakeholder engagement skills.

Responsibilities

• Design, review, and evolve secure application architectures across multi-country environments.
• Conduct security architecture reviews and provide actionable security requirements and guidance.
• Advise on GenAI, LLM & AI security, including data protection and prompt injection mitigation.
• Perform security assessments of Cloud Services (AWS, Azure, GCP, OCI).
• Influence leaders to adopt secure-by-design principles and improve security maturity.
• Support Threat Modeling activities using IriusRisk to map risks and mitigations.
• Develop and maintain secure architecture patterns and standards (NIST/OWASP/CIS).
• Embed security across the SDLC, teach secure coding, API design, and CI/CD security.
• Support secure integration of third-party platforms and SaaS with risk awareness.
• Partner with Cloud Architecture teams to enforce cloud security controls.

Skills

Application Security

Security Architecture

GenAI / AI security

Cloud security

Threat modeling

IAM / OAuth2 / JWT

CI/CD security

Secure coding

Communication & Stakeholder engagement

Education

Bachelor's degree

Tools

IriusRisk

ThreatModeler

Microsoft Threat Modeling Tool

Job description

ADP is Hiring a Senior Application Security Architect

Unlock Your Career Potential: Global Security Organization at ADP.

Do you have a passion for going on the offensive to safeguard critical information? As ADP's Global Security Organization (GSO), we know that our clients rely on us for human capital management solutions, but beyond that, they entrust us with one of their most valuable assets -- their employee data.

We are honored by this trust and are laser focused on securing data at every step in the information lifecycle, ensuring integrity, confidentiality and compliance with industry and government regulations at all times.

From the cloud to the data center and across every emerging device, you'll join a team of experts in the GSO who are always staying one step ahead in this ever‑changing world of data by continually evolving our strategies and technologies to protect ADP and our clients.

Position Summary

We are seeking a highly skilled and experienced Senior Application Security Architect to join our team. In this role, you will be part of the Product Security organization within ADP’s Global Security Organization (GSO), which plays a strategic role in enabling secure development and supporting the delivery of trusted products, solutions, and services across the entire ADP ecosystem.

As a Senior Application Security Architect, you will partner closely with product, engineering, and cloud architecture teams to design and guide the implementation of secure application architectures. You will leverage your deep expertise in application security architecture, Cloud security, and AI/GenAI security, to influence design decisions, reduce risk, and champion secure‑by‑design principles across the organization.

This role is instrumental in helping teams build secure applications, integrate third‑party and SaaS solutions responsibly, and elevate ADP’s overall security posture through thought leadership, architectural oversight, and proactive engagement throughout the SDLC.

Key Responsibilities

• Partner with global product and engineering teams to design, review, and evolve secure application architectures across multi-country environments.
• Conduct in-depth security architecture reviews and provide clear, actionable security requirements, design guidance, and validation throughout the entire solution lifecycle.
• Advise on GenAI, LLM, and AI/ML application security, including data protection, model security, prompt injection mitigation, dependency controls, secure model integration, and risk evaluation of AI-driven components.
• Perform security assessments of Cloud Services (AWS, Azure, GCP, OCI) to confirm required security requirements to enable Cloud services at ADP.
• Influence technical leaders—solution architects, security champions, engineering managers, and developers to adopt secure‑by‑design principles and continuously improve security maturity.
• Support Threat Modeling activities, leveraging tools such as IriusRisk to help teams create architecture diagrams, identify security risks, define countermeasures, and validate threat coverage.
• Develop and maintain secure architecture patterns, reference architectures, and application security standards, ensuring alignment with industry frameworks (e.g., NIST, OWASP, CIS).
• Embed security across the SDLC, educating product teams on integrating secure coding practices, secure API design, CI/CD security controls, and automated security testing.
• Support secure integration of third‑party platforms, SaaS solutions, and cloud‑native services, ensuring vendor risk and architecture risks are understood and mitigated.
• Partner with Cloud Architecture teams to ensure consistent application of cloud security controls across AWS, Azure, and hybrid environments.
• Communicate complex security concepts to both technical and non-technical stakeholders, enabling informed decision‑making at all levels.

To Succeed In This Role

• You’ll have a bachelor’s degree in computer science, Information Security, Engineering, or a related field (or equivalent experience).

Qualifications

• 8+ years of experience in Application Security, Security Architecture, or related technical security roles.
• Deep expertise in Application Security practices, including secure coding, API security, microservices, cloud application security, DevSecOps, and security scanning tools.
• Strong understanding of GenAI / LLM / Agentic AI security, including data governance, retrieval‑augmented generation (RAG), model threats, prompt injection risks, and secure integration patterns.
• Strong knowledge of cloud platform (such as AWS, Azure, OCI, and/or GCP) security capabilities and controls.
• Strong knowledge of security frameworks and standards (e.g., OWASP ASVS, SAMM, NIST 800‑53, NIST CSF, ISO 27001, CIS Controls).
• Hands‑on experience with Threat Modeling methodologies, tools (e.g., IriusRisk, ThreatModeler, Microsoft Threat Modeling Tool), and risk assessment techniques.
• Knowledge of identity and access management, OAuth2/OIDC, JWT security, secrets management, key management, and zero‑trust design principles.
• Experience with CI/CD pipeline security and infrastructure‑as‑code security.
• Strong understanding of data security, encryption, privacy‑by‑design, and secure logging and monitoring practices.
• Excellent communication, collaboration, and stakeholder engagement skills, with the ability to influence and drive security adoption.
• Relevant security certifications are a plus: CISSP, CISM, CCSP, CSSLP, CEH, SANS/GIAC certifications, or cloud security certifications such as Google Professional Cloud Security Engineer.

Base salary offers for this position may vary based on factors such as location, skills, and relevant experience. Some positions may include additional compensation in the form of bonus, equity or commissions. The compensation for this role is USD $107,400.00 - USD $264,300.00 / Year*

Benefits

• Medical
• Dental
• Vision
• Life Insurance
• Matched Retirement Savings
• Wellness Program
• Short-and Long-Term Disability
• Charitable Contribution Match
• Holidays
• Personal Days & Vacation
• Paid Volunteer Time Off
• and more

• Actual compensation will not be less than the applicable minimum wage or minimum exempt salary requirement under federal, state and local laws.

A little about ADP

We are a comprehensive global provider of cloud-based human capital management (HCM) solutions that unite HR, payroll, talent, time, tax and benefits administration and a leader in business outsourcing services, analytics, and compliance expertise. We believe our people make all the difference in cultivating a down‑to‑earth culture that embraces our core values, welcomes ideas, encourages innovation, and values belonging. We've received recognition for our work by many esteemed organizations, learn more at ADP Awards and Recognition.

Diversity, Equity, Inclusion & Equal Employment Opportunity at ADP

ADP is committed to an inclusive, diverse and equitable workplace, and is further committed to providing equal employment opportunities regardless of any protected characteristic including: race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, protected veteran status or disability. Hiring decisions are based upon ADP’s operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, cooperation, and job performance.

Ethics at ADP

ADP has a long, proud history of conducting business with the highest ethical standards and full compliance with all applicable laws. We also expect our people to uphold our values with the highest level of integrity and behave in a manner that fosters an honest and respectful workplace. Click https://jobs.adp.com/life-at-adp/ to learn more about ADP’s culture and our full set of values.