Zero Trust & Microsegmentation Engineer

S&P Global•Princeton, NJ

1d•$150,000 - $190,000

About The Position

S&P Global is seeking an engineer for its Cybersecurity Engineering team to bridge application complexity and security precision. The role works at the intersection of network engineering, cybersecurity, and application architecture, collaborating across the enterprise to design and enforce Zero Trust principles at scale. It is a high-visibility role shaping the security posture of critical global infrastructure. The engineer will architect and enforce enterprise-wide micro-segmentation policies across applications, servers, workloads, and cloud environments; map and validate application communication flows; and translate dependencies and access requirements into precise security controls. The role also drives policy assurance through network telemetry and traffic-flow analysis, leads remediation and contributes to incident response, automates policy deployment and validation, and partners on cloud adoption, data-center transformation, and modernization initiatives. The position offers a base salary range of $150,000 to $190,000, with final base pay dependent on geographic location and factors such as experience, skills, training, licenses, and certifications. It is also eligible for an annual incentive plan and additional S&P Global benefits.

Requirements

At least 5 years of experience in network engineering, network security, cybersecurity, or infrastructure engineering.
Demonstrated expertise in TCP/IP, DNS, DHCP, routing, switching, VLANs, NAT, load balancing, and enterprise firewall management.
At least 2 years of hands-on implementation of micro-segmentation, network segmentation, or Zero Trust architectures in enterprise environments.
Ability to analyze application dependencies and translate port, protocol, and authentication requirements into firewall rules, ACLs, or equivalent access-control policies.

Nice To Haves

Hands-on experience with enterprise micro-segmentation platforms such as Akamai Guardicore Segmentation, Illumio, or Zscaler.
Experience with cloud networking and security controls in AWS, Azure, or GCP.
Experience with Kubernetes or container networking and workload segmentation.
Experience deploying security policy automation using Terraform, Ansible, Python, or PowerShell.
A track record of architecting and delivering Zero Trust Network Access solutions at enterprise scale.
Experience with SIEM platforms, network detection tools, and vulnerability management solutions.
An active certification in CCNP, CISSP, CompTIA Security+, PCNSE, AWS Security Specialty, or Microsoft AZ-500.

Responsibilities

Architect and enforce enterprise-wide micro-segmentation policies across applications, servers, workloads, and cloud environments.
Map and validate end-to-end application communication flows, including dependencies, ports, protocols, and authentication requirements.
Translate application requirements into firewall rules, ACLs, and Zero Trust Network Access controls while avoiding disruption to business-critical operations.
Perform traffic-flow analysis using network telemetry, NetFlow, packet captures, and application dependency mapping to validate segmentation outcomes before and after changes.
Identify and remediate overly permissive connectivity gaps.
Serve as an approver for network change requests and contribute to major incident response.
Automate and scale segmentation policy deployment, compliance reporting, and validation.
Build a Micro-Segmentation framework that supports quality, rigorous change management, and long-term operational resilience.
Partner on cloud adoption, data-center transformations, and modernization initiatives.
Develop documentation standards, labeling strategies, and segmentation procedures governing the enterprise network security posture.