Associate Director, Cloud Network Engineer

S&P Global•Princeton, NJ

7d•$129,000 - $175,000

About The Position

The Associate Director, Cloud Network Engineer joins Global Network Services, a globally distributed engineering team responsible for designing, securing, and automating S&P Global's cloud and hybrid network infrastructure. The role focuses on GCP adoption, network automation, and security platform modernization, with hands-on engineering responsibilities and influence over enterprise connectivity standards and architecture. The position owns enterprise GCP network architecture and delivers scalable, secure connectivity for business-critical applications. It builds automation and infrastructure-as-code practices to improve provisioning, reduce configuration drift, and standardize network changes. The role also designs and operates Palo Alto Networks firewall and egress inspection capabilities, strengthens network segmentation and security, and works with Security, InfoSec, application, and infrastructure teams to meet governance, audit, and compliance needs. As the senior technical authority for GCP networking across engineering and operations, the role resolves complex hybrid network issues, participates in an on-call rotation, delivers approved changes during maintenance windows, and identifies opportunities to reduce risk, optimize capacity, and improve engineering standards.

Requirements

10 or more years of enterprise networking experience, including significant hands-on experience in large-scale cloud environments.
Hands-on experience designing, deploying, and operating Palo Alto Networks firewalls, including VM-Series in cloud and centralized management via Panorama.
Deep, hands-on GCP networking experience, including VPC and Shared VPC design, Cloud Interconnect, Cloud Router, Cloud NAT, Cloud DNS, Cloud Load Balancing, and Private Service Connect.
Production experience with network automation and infrastructure as code, including Terraform and Python, with Git version control.
Excellent knowledge of networking standards, protocols, and technologies, including BGP, OSPF, routing policy, switching, VPNs, DNS, and load balancing.
Working knowledge of AWS and Azure networking, including Direct Connect, Transit Gateway, VPC and security groups, ExpressRoute, and Virtual WAN.
Excellent troubleshooting and analytical skills for diagnosing and resolving complex network issues across cloud and hybrid environments.
Ability to work independently and collaborate effectively with cross-functional teams.
Ability to manage multiple priorities, commitments, and projects.
Bachelor's degree or advanced degree in Computer Science, Information Security, Engineering, or a related discipline, or equivalent practical experience demonstrating technical leadership capabilities.

Nice To Haves

Google Professional Cloud Network Engineer certification.
Palo Alto Networks PCNSE certification.
HashiCorp Terraform Associate, AWS Advanced Networking Specialty, or Microsoft Azure Network Engineer Associate certification.
Experience with network segmentation and micro-segmentation technologies such as Akamai Guardicore or Illumio.
Familiarity with Cloud Native NaaS platforms such as Alkira, Prosimo, or Aviatrix.
Understanding of AI and its practical application to cloud networking, including LLM-based assistants and AI-assisted tools for Terraform and policy generation, configuration review, log and flow analysis, root-cause troubleshooting, and documentation.
Experience with Ansible and automated network testing tools such as Batfish or pyATS.
Exposure to network observability and AIOps platforms such as Selector AI or ThousandEyes.
Experience working in a regulated financial services environment with formal change, audit, and evidence requirements.

Responsibilities

Own enterprise GCP network architecture, designing, deploying, and managing VPCs and Shared VPCs, Cloud Interconnect, Cloud Router, Cloud NAT, Cloud DNS, Cloud Load Balancing, and Private Service Connect across multi-project and multi-folder environments.
Implement hierarchical firewall policies, VPC Service Controls, and hybrid connectivity to on-premises environments and other cloud providers using BGP and routing policy.
Build and maintain Terraform modules for GCP and multi-cloud network provisioning.
Develop Python and Ansible automation to eliminate manual provisioning, reduce configuration drift, and shorten delivery timelines.
Establish and operate CI/CD pipelines for network changes, including automated validation, policy-as-code checks, pre-deployment testing, and controlled rollback.
Set version-controlled, peer-reviewed, modular engineering standards across shared automation repositories.
Design, deploy, and operate Palo Alto Networks VM-Series firewalls at enterprise scale, including autoscaling, centralized policy management through Panorama and Strata Cloud Manager, security policy configuration, and SIEM and observability integrations.
Contribute to migrating legacy firewall platforms to the Palo Alto estate.
Drive network segmentation and security posture across cloud, data center, and hybrid infrastructure in partnership with Security, InfoSec, application, and infrastructure teams.
Ensure network designs meet enterprise governance, audit, and compliance requirements; support egress proxy onboarding and phased policy enforcement.
Serve as the senior technical authority for GCP networking across engineering and operations.
Troubleshoot complex network failures across hybrid environments, participate in the on-call rotation, and deliver approved changes within maintenance windows.
Identify continuous improvement opportunities to reduce risk, optimize capacity, and elevate engineering standards.