Zero Trust & Microsegmentation Engineer

S&P Global•Princeton, NJ

2d•$150,000 - $190,000

About The Position

S&P Global is seeking an engineer for its Cybersecurity Engineering team to bridge application complexity and security precision by designing and enforcing Zero Trust principles at enterprise scale. The role works at the intersection of network engineering, cybersecurity, and application architecture, collaborating across the enterprise to shape the security posture of critical global infrastructure. The engineer will architect and enforce micro-segmentation policies across applications, servers, workloads, and cloud environments; analyze and validate application communication flows; and translate dependencies and access requirements into firewall rules, ACLs, and ZTNA controls. The role also focuses on traffic-flow analysis and policy assurance, incident response and remediation, automation of segmentation policy deployment and compliance reporting, and partnership on cloud adoption, data-center transformation, and modernization initiatives. The anticipated base salary range is $150,000 to $190,000, with final base salary depending on geographic location, experience, skills, training, licenses, and certifications. The role is eligible for an annual incentive plan and additional S&P Global benefits.

Requirements

At least 5 years of experience in network engineering, network security, cybersecurity, or infrastructure engineering.
Demonstrated expertise in TCP/IP, DNS, DHCP, routing, switching, VLANs, NAT, load balancing, and enterprise firewall management.
At least 2 years of hands-on implementation of micro-segmentation, network segmentation, or Zero Trust architectures in enterprise environments.
Ability to analyze application dependencies and translate port, protocol, and authentication requirements into firewall rules, ACLs, or equivalent access-control policies.

Nice To Haves

Hands-on experience with enterprise micro-segmentation platforms such as Akamai Guardicore Segmentation, Illumio, or Zscaler.
Experience with cloud networking and security controls in AWS, Azure, or GCP.
Experience with Kubernetes or container networking and workload segmentation.
Experience deploying security policy automation using Terraform, Ansible, Python, or PowerShell.
A track record of architecting and delivering enterprise-scale Zero Trust Network Access solutions.
Experience with SIEM platforms, network detection tools, and vulnerability management solutions.
An active certification in CCNP, CISSP, CompTIA Security+, PCNSE, AWS Security Specialty, or Microsoft AZ-500.

Responsibilities

Architect and enforce enterprise-wide micro-segmentation policies across applications, servers, workloads, and cloud environments.
Map and validate end-to-end application communication flows, including dependencies, ports, protocols, and authentication requirements.
Translate application communication requirements into firewall rules, ACLs, and Zero Trust Network Access controls.
Perform traffic-flow analysis using network telemetry, NetFlow, packet captures, and application dependency mapping to validate segmentation outcomes before and after changes.
Remediate overly permissive connectivity gaps, approve network change requests, and contribute to major incident response.
Automate and scale segmentation policy deployment, compliance reporting, and validation.
Build a micro-segmentation framework with quality controls, change-management rigor, and operational resilience.
Partner on cloud adoption, data-center transformations, and modernization initiatives.
Develop documentation standards, labeling strategies, and segmentation procedures governing enterprise network security.