Associate Director, Cloud Network Engineer
Spgi · Princeton, New Jersey, United States
About the Role:
Grade Level (for internal use):
12The Team:
Global Network Services is a high-impact, globally distributed engineering team responsible for designing, securing, and automating S&P Global's cloud and hybrid network infrastructure. The Cloud Network Engineering team operates at the forefront of GCP adoption, network automation, and security platform modernization — combining hands-on engineering rigor with infrastructure-as-code discipline to deliver a cloud network estate that is faster to provision, safer to operate, and built to scale. You will work both autonomously and collaboratively, with direct influence over the standards and architecture that underpin business-critical connectivity across the enterprise.
The Impact:
You will shape how S&P Global builds and secures its Google Cloud network. Your designs will determine the scalability, segmentation and performance of GCP connectivity for business-critical applications, and the automation you write will become the standard way those networks are provisioned. Through the Palo Alto egress and inspection platform, you will directly strengthen our security posture, reducing data-exfiltration risk and replacing inconsistent legacy controls with centrally governed, observable policy. The result is a cloud network that is faster to deliver, cheaper to operate and materially harder to misconfigure.
Job Responsibilities
- Own the enterprise GCP network architecture — design, deploy and manage GCP network services including VPCs/Shared VPC, Cloud Interconnect, Cloud Router, Cloud NAT, Cloud DNS, Cloud Load Balancing and Private Service Connect across multi-project, multi-folder environments, including hierarchical firewall policies, VPC Service Controls and hybrid connectivity to on-premises and other cloud providers via BGP and routing policy.
- Build and maintain Terraform modules for GCP and multi-cloud network provisioning; develop Python and Ansible automation to eliminate manual network provisioning, reduce configuration drift, and materially shorten delivery timelines across the network estate.
- Establish and operate CI/CD pipelines for network change delivery — including automated validation, policy-as-code checks, pre-deployment testing, and controlled rollback — setting version-controlled, peer-reviewed, modular engineering standards across shared automation repositories.
- Design, deploy and operate Palo Alto Networks VM-Series firewalls at enterprise scale — including autoscaling deployments, centralized policy management via Panorama and Strata Cloud Manager (SCM), full security policy configuration (App-ID, URL filtering, anti-spyware, decryption), and integration with SIEM and observability tooling; contribute to the migration of legacy firewall platforms onto the Palo Alto estate.
- Drive network segmentation and security posture across cloud, data center, and hybrid infrastructure — partnering with Security, InfoSec, application, and infrastructure teams to ensure designs meet enterprise governance, audit, and compliance requirements; support egress proxy platform onboarding and phased policy enforcement.
- Serve as the senior technical authority for GCP networking across engineering and operations — troubleshooting complex network failures across hybrid environments, participating in on-call rotation, delivering approved changes within maintenance windows, and identifying continuous improvement opportunities to reduce risk, optimise capacity, and elevate engineering standards.
What We’re Looking For:
Basic Required Qualifications:
- Proven experience (10+ years) in enterprise networking, including significant hands-on experience in large-scale cloud environments.
- Hands-on experience designing, deploying and operating Palo Alto Networks firewalls, including VM-Series in cloud and centralized management via Panorama.
- Deep, hands-on GCP networking experience, including VPC and Shared VPC design, Cloud Interconnect, Cloud Router, Cloud NAT, Cloud DNS, Cloud Load Balancing and Private Service Connect.
- Demonstrable production experience with network automation and infrastructure-as-code, including Terraform and Python, with version control using Git.
- Excellent knowledge of networking standards, protocols and technologies, including BGP, OSPF, routing policy, switching, VPNs, DNS and load balancing.
- Working knowledge of AWS and Azure networking, including Direct Connect, Transit Gateway, VPC and security groups, ExpressRoute and Virtual WAN.
- Excellent troubleshooting and analytical skills to diagnose and resolve complex network issues across cloud and hybrid environments.
- Ability to work independently and collaborate effectively with cross-functional teams.
- Team player who enjoys a mix of autonomy and collaboration-based delivery.
- Ability to manage multiple priorities, commitments and projects.
- Bachelor's degree or advanced degree in Computer Science, Information Security, Engineering, or related discipline, or equivalent practical experience demonstrating technical leadership capabilities
Additional Preferred Qualifications:
- Google Professional Cloud Network Engineer certification. Palo Alto Networks PCNSE certification.
- HashiCorp Terraform Associate, AWS Advanced Networking Specialty or Microsoft Azure Network Engineer Associate certification.
- Experience with network segmentation and micro-segmentation technologies such as Akamai Guardicore or Illumio.
- Familiarity with Cloud Native NaaS (Network as a Service) platforms such as Alkira, Prosimo or Aviatrix.
- Understanding of AI and its practical application to cloud networking, such as using LLM-based assistants and AI-assisted tooling for Terraform and policy generation, configuration review, log and flow analysis, root-cause troubleshooting and documentation.
- Experience with Ansible, and with automated network testing using tools such as Batfish or pyATS.
- Exposure to network observability and AIOps platforms such as Selector AI or ThousandEyes.
- Experience working in a regulated financial services environment with formal change, audit and evidence requirements.
Compensation/Benefits Information: (This section is only applicable to US candidates)
S&P Global states that the anticipated base salary range for this position is $129,000 to $175,000. Final base salary for this role will be based on the individual’s geographic location, as well as experience level, skill set, training, licenses and certifications.
In addition to base compensation, this role is eligible for an annual incentive plan.
This role is eligible to receive additional S&P Global benefits. For more information on the benefits we provide to our employees, please click here.
What’s In It For You?
Our Mission:
Advancing Essential Intelligence.
Our People:
We're more than 35,000 strong worldwide—so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us all.From finding new ways to measure sustainability to analyzing energy transition across the supply chain to building workflow solutions that make it easy to tap into insight and apply it. We are changing the way people see things and empowering them to make an impact on the world we live in. We’re committed to a more equitable future and to helping our customers find new, sustainable ways of doing business. Join us and help create the critical insights that truly make a difference.
Our Values:
Integrity, Discovery, Partnership
Throughout our history, the world's leading organizations have relied on us for the Essential Intelligence they need to make confident decisions about the road ahead. We start with a foundation of integrity in all we do, bring a spirit of discovery to our work, and collaborate in close partnership with each other and our customers to achieve shared goals.
Benefits: