Associate Director, Cloud Network Engineer

S&P Global•Princeton, NJ

1d•$129,000 - $175,000

About The Position

The Cloud Network Engineer will join Global Network Services, a globally distributed engineering team responsible for designing, securing, and automating S&P Global’s cloud and hybrid network infrastructure. The role focuses on GCP network engineering, automation, and security modernization, with influence over enterprise network standards and architecture. The position owns enterprise GCP network architecture and provisioning, builds infrastructure-as-code and automation, and establishes CI/CD processes for network changes. It also designs and operates Palo Alto Networks VM-Series firewall deployments and supports migration from legacy firewall platforms. The role advances network segmentation and security across cloud, data center, and hybrid environments, partnering with security, application, and infrastructure teams to meet governance, audit, and compliance requirements. As a senior technical authority for GCP networking, the engineer troubleshoots complex hybrid network issues, participates in an on-call rotation, delivers approved changes during maintenance windows, and identifies opportunities to reduce risk, optimize capacity, and improve engineering standards. The position requires 10 or more years of enterprise networking experience and a bachelor’s or advanced degree in a related discipline, or equivalent practical experience demonstrating technical leadership capabilities. The anticipated US base salary range is $129,000 to $175,000. The role is eligible for an annual incentive plan and additional S&P Global benefits. Final base salary depends on location, experience, skills, training, licenses, and certifications.

Requirements

10 or more years of enterprise networking experience, including significant hands-on experience in large-scale cloud environments.
Hands-on experience designing, deploying, and operating Palo Alto Networks firewalls, including VM-Series in cloud and centralized management via Panorama.
Deep hands-on GCP networking experience, including VPC and Shared VPC design, Cloud Interconnect, Cloud Router, Cloud NAT, Cloud DNS, Cloud Load Balancing, and Private Service Connect.
Production experience with network automation and infrastructure as code, including Terraform and Python, with version control using Git.
Excellent knowledge of networking standards, protocols, and technologies, including BGP, OSPF, routing policy, switching, VPNs, DNS, and load balancing.
Working knowledge of AWS and Azure networking, including Direct Connect, Transit Gateway, VPC and security groups, ExpressRoute, and Virtual WAN.
Excellent troubleshooting and analytical skills for resolving complex network issues across cloud and hybrid environments.
Ability to work independently and collaborate effectively with cross-functional teams.
Ability to manage multiple priorities, commitments, and projects.
Bachelor’s or advanced degree in Computer Science, Information Security, Engineering, or a related discipline, or equivalent practical experience demonstrating technical leadership capabilities.

Nice To Haves

Google Professional Cloud Network Engineer certification.
Palo Alto Networks PCNSE certification.
HashiCorp Terraform Associate, AWS Advanced Networking Specialty, or Microsoft Azure Network Engineer Associate certification.
Experience with network segmentation and micro-segmentation technologies such as Akamai Guardicore or Illumio.
Familiarity with Cloud Native NaaS platforms such as Alkira, Prosimo, or Aviatrix.
Understanding of AI and practical applications to cloud networking, including LLM-based assistants and AI-assisted tooling for Terraform and policy generation, configuration review, log and flow analysis, root-cause troubleshooting, and documentation.
Experience with Ansible and automated network testing tools such as Batfish or pyATS.
Exposure to network observability and AIOps platforms such as Selector AI or ThousandEyes.
Experience working in a regulated financial services environment with formal change, audit, and evidence requirements.

Responsibilities

Own enterprise GCP network architecture and design, deploy, and manage network services across multi-project and multi-folder environments, including hybrid connectivity to on-premises infrastructure and other cloud providers.
Build and maintain Terraform modules for GCP and multi-cloud network provisioning, and develop Python and Ansible automation to reduce manual work and configuration drift.
Establish and operate CI/CD pipelines for network changes, including automated validation, policy-as-code checks, pre-deployment testing, and controlled rollback.
Set version-controlled, peer-reviewed, modular engineering standards across shared automation repositories.
Design, deploy, and operate Palo Alto Networks VM-Series firewalls at enterprise scale, including autoscaling deployments and centralized policy management through Panorama and Strata Cloud Manager.
Configure firewall security policies, including App-ID, URL filtering, anti-spyware, and decryption, and integrate firewalls with SIEM and observability tooling.
Contribute to migrating legacy firewall platforms to the Palo Alto estate.
Drive network segmentation and security posture across cloud, data center, and hybrid infrastructure in partnership with Security, InfoSec, application, and infrastructure teams.
Support egress proxy platform onboarding and phased policy enforcement.
Serve as the senior technical authority for GCP networking across engineering and operations.
Troubleshoot complex network failures across hybrid environments and participate in the on-call rotation.
Deliver approved changes within maintenance windows and identify continuous improvement opportunities to reduce risk, optimize capacity, and elevate engineering standards.