Engineer Jobs

10,000 jobs found — updated daily

Zero Trust & Microsegmentation Engineer

S&P Global•Princeton, NJ
•Onsite

About The Position

S&P Global’s Cybersecurity Engineering team is seeking an engineer to design and enforce Zero Trust principles across the enterprise. The role bridges network engineering, cybersecurity, and application architecture, helping protect critical global infrastructure by applying precise segmentation policies across applications, servers, workloads, and cloud environments. The engineer will analyze application communication and dependencies, translate requirements into access-control policies, validate traffic flows and segmentation outcomes, and contribute to incident response and remediation. The role also supports automation, compliance reporting, cloud adoption, data-center transformations, and modernization through enterprise-wide documentation, labeling, and segmentation standards.

Requirements

  • At least 5 years of experience in network engineering, network security, cybersecurity, or infrastructure engineering.
  • Demonstrated expertise in TCP/IP, DNS, DHCP, routing, switching, VLANs, NAT, load balancing, and enterprise firewall management.
  • At least 2 years of hands-on implementation experience with micro-segmentation, network segmentation, or Zero Trust architectures in enterprise environments.
  • Ability to analyze application dependencies and translate port, protocol, and authentication requirements into firewall rules, ACLs, or equivalent access-control policies.

Nice To Haves

  • Hands-on experience with enterprise micro-segmentation platforms such as Akamai Guardicore Segmentation, Illumio, or Zscaler.
  • Experience with cloud networking and security controls in AWS, Azure, or GCP.
  • Experience with Kubernetes/container networking and workload segmentation.
  • Experience deploying security policy automation using Terraform, Ansible, Python, or PowerShell.
  • A track record of architecting and delivering enterprise-scale ZTNA solutions.
  • Experience with SIEM platforms, network detection tools, and vulnerability management solutions.
  • An active certification in CCNP, CISSP, CompTIA Security+, PCNSE, AWS Security Specialty, or Microsoft AZ-500.

Responsibilities

  • Architect and enforce enterprise-wide micro-segmentation policies across applications, servers, workloads, and cloud environments.
  • Map and validate end-to-end application communication flows, including dependencies, ports, protocols, and authentication requirements, and translate them into firewall rules, ACLs, and ZTNA controls.
  • Analyze network telemetry, NetFlow, packet captures, and application dependency mappings to validate segmentation outcomes before and after changes.
  • Lead remediation of overly permissive connectivity gaps, approve network change requests, and contribute to major incident response.
  • Automate and scale segmentation policy deployment, compliance reporting, and validation.
  • Develop documentation standards, labeling strategies, and segmentation procedures supporting cloud adoption, data-center transformations, and modernization initiatives.
  • Partner with teams across the business to govern the enterprise network security posture.

Benefits

  • Health care coverage for mind and body.
  • Generous time off.
  • Access to learning resources and career development opportunities.
  • Retirement planning and financial wellness programs.
  • Continuing education program with a company-matched student loan contribution.
  • Family benefits and perks.
  • Retail discounts and referral incentive awards.
  • Competitive pay and eligibility for an annual incentive plan.

Build a Resume for Engineer

The resume builder that gets results.

  • Get clear feedback so you look as qualified as you are
  • Align your resume with the job to get further in the process, faster
  • Take the guesswork out of resume writing

Explore Related Job Searches

© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service