Associate Director, Cloud Network Engineer

S&P Global Inc.; Princeton (NJ); On-site; USD 129,000 - 175,000; Full time

Benefits offered by this job

Health care coverage

Flexible downtime

Continuous learning

Retirement planning & education perks

Family friendly perks

Perks for others

Job summary

S&P Global Inc. is seeking an experienced Senior Network Architect to lead the enterprise GCP network design, deployment, and security. You will architect multi‑project GCP connectivity, deploy VM‑Series firewalls, and drive automation with Terraform and Python.

The role emphasizes policy‑driven provisioning and scalable, secure network operations across cloud and hybrid environments. You will collaborate with Security, Infra, and Application teams to enforce governance, automate changes,

Qualifications

• 10+ years in enterprise networking with hands-on cloud experience.
• Hands-on design, deployment and operation of Palo Alto VM-Series firewalls.
• Deep GCP networking experience: VPC/Shared VPC, Cloud Interconnect, Cloud Router, NAT, DNS, Load Balancing, Private Service Connect.
• Proven network automation with Terraform and Python; version control with Git.

Responsibilities

• Own the enterprise GCP network architecture across multi-project environments.
• Build and maintain Terraform modules for network provisioning; automate with Python/Ansible.
• Establish CI/CD pipelines for network change delivery with policy-as-code.
• Deploy Palo Alto VM-Series firewalls at enterprise scale with centralized policy management.
• Drive network segmentation and security posture across cloud, data center, and hybrid infra.
• Serve as senior technical authority for GCP networking and on-call troubleshooting.

Skills

Enterprise networking

GCP networking

BGP/OSFP routing

Network security

Network automation

Education

Bachelor's degree or higher in CS/Engineering/InfoSec

Tools

Terraform

Python

Ansible

Git

Job description

About the Role:

Grade Level (for internal use):

12

The Team:

Global Network Services is a high-impact, globally distributed engineering team responsible for designing, securing, and automating S&P Global's cloud and hybrid network infrastructure. The Cloud Network Engineering team operates at the frontier of GCP adoption, network automation, and security platformmodernization— combining hands‑on engineeringrigorwith infrastructure-as-code discipline to deliver a cloud network estate that is faster to provision, safer to operate, and built to scale. You will work both autonomously and collaboratively, with direct influence over the standards and architecture that underpin business‑critical connectivity across the enterprise.

The Impact:

You will shape how S&P Global builds and secures its Google Cloud network. Your designs will determine the scalability, segmentation and performance of GCP connectivity for business‑critical applications, and the automation you write will become the standard way those networks are provisioned. Through the Palo Alto egress and inspection platform, you will directly strengthen our security posture, reducing data‑exfiltration risk and replacing inconsistent legacy controls with centrally governed, observable policy. The result is a cloud network that is faster to deliver, cheaper to operate and materially harder to misconfigure.

Job Responsibilities

• Own the enterprise GCP network architecture — design, deploy and manage GCP network services including VPCs/Shared VPC, Cloud Interconnect, Cloud Router, Cloud NAT, Cloud DNS, Cloud Load Balancing and Private Service Connect across multi‑project, multi‑folder environments, including hierarchical firewall policies, VPC Service Controls and hybrid connectivity to on‑premises and other cloud providers via BGP and routing policy.
• Build and maintain Terraform modules for GCP and multi‑cloud network provisioning; develop Python and Ansible automation to eliminate manual network provisioning, reduce configuration drift, and materially shorten delivery timelines across the network estate.
• Establish and operate CI/CD pipelines for network change delivery — including automated validation, policy-as-code checks, pre‑deployment testing, and controlled rollback — setting version‑controlled, peer‑reviewed, modular engineering standards across shared automation repositories.
• Design, deploy and operate Palo Alto Networks VM‑Series firewalls at enterprise scale — including autoscaling deployments, centralizedpolicy management via Panorama and Strata Cloud Manager (SCM), full security policy configuration (App‑ID, URL filtering, anti‑spyware, decryption), and integration with SIEM and observability tooling; contribute to the migration of legacy firewall platforms onto the Palo Alto estate.
• Drive network segmentation and security posture across cloud, data center, and hybrid infrastructure — partnering with Security, InfoSec, application, and infrastructure teams to ensure designs meet enterprise governance, audit, and compliance requirements; support egress proxy platform onboarding and phased policy enforcement.
• Serve as the senior technical authority for GCP networking across engineering and operations — troubleshooting complex network failures across hybrid environments, participating in on‑call rotation, delivering approved changes within maintenance windows, and identifying continuous improvement opportunities to reduce risk, optimise capacity, and elevate engineering standards.

What We’re Looking For:

Basic Required Qualifications:

• Proven experience (10+ years) in enterprise networking, including significant hands‑on experience in large‑scale cloud environments.
• Hands‑on experience designing, deploying and operating Palo Alto Networks firewalls, including VM‑Series in cloud andcentralizedmanagement via Panorama.
• Deep, hands‑on GCP networking experience, including VPC and Shared VPC design, Cloud Interconnect, Cloud Router, Cloud NAT, Cloud DNS, Cloud Load Balancing and Private Service Connect.
• Demonstrable production experience with network automation and infrastructure‑as‑code, including Terraform and Python, with version control using Git.
• Excellent knowledge of networking standards, protocols and technologies, including BGP, OSPF, routing policy, switching, VPNs, DNS and load balancing.
• Working knowledge of AWS and Azure networking, including Direct Connect, Transit Gateway, VPC and security groups, ExpressRoute and Virtual WAN.
• Excellent troubleshooting and analytical skills to diagnose and resolve complex network issues across cloud and hybrid environments.
• Ability to work independently and collaborate effectively with cross‑functional teams.
• Team player who enjoys a mix of autonomy and collaboration‑based delivery.
• Ability to manage multiple priorities, commitments and projects.
• Bachelor's degree or advanced degree in Computer Science, Information Security, Engineering, or related discipline, or equivalent practical experience demonstrating technical leadership capabilities

Additional Preferred Qualifications:

• Google Professional Cloud Network Engineer certification. Palo Alto Networks PCNSE certification.
• HashiCorp Terraform Associate, AWS Advanced Networking Specialty or Microsoft Azure Network Engineer Associate certification.
• Experience with network segmentation and micro‑segmentation technologies such as Akamai Guardicore or Illumio.
• Familiarity with Cloud Native NaaS (Network as a Service) platforms such as Alkira, Prosimo or Aviatrix.
• Understanding of AI and its practical application to cloud networking, such as using LLM‑based assistants and AI‑assisted tooling for Terraform and policy generation, configuration review, log and flow analysis, root‑cause troubleshooting and documentation.
• Experience with Ansible, and with automated network testing using tools such as Batfish or pyATS.
• Exposure to network observability and AIOps platforms such as Selector AI or ThousandEyes.
• Experience working in a regulated financial services environment with formal change, audit and evidence requirements.

Compensation/Benefits Information:

(This section is only applicable to US candidates)

S&P Global states that the anticipated base salary range for this position is $129,000 to $175,000. Final base salary for this role will be based on the individual’s geographic location, as well as experience level, skill set, training, licenses and certifications.

In addition to base compensation, this role is eligible for an annual incentive plan.

This role is eligible to receive additional S&P Global benefits. For more information on the benefits we provide to our employees, please click here.

What’s In It For You?

Our Mission:

Advancing Essential Intelligence.

Our People:

We're more than 35,000 strong worldwide—so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us all.From finding new ways to measure sustainability to analyzing energy transition across the supply chain to building workflow solutions that make it easy to tap into insight and apply it. We are changing the way people see things and empowering them to make an impact on the world we live in. We’re committed to a more equitable future and to helping our customers find new, sustainable ways of doing business. Join us and help create the critical insights that truly make a difference.

Our Values:

Integrity, Discovery, Partnership

Benefits:

We take care of you, so you cantake care of business. We care about our people. That’s why we provide everything you—and your career—need to thrive at S&P Global.
Our benefits include:

• Health & Wellness: Health care coverage designed for the mind and body.

• Flexible Downtime: Generous time off helps keep you energized for your time on.

• Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.

• Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company‑matched student loan contribution, and financial wellness programs.

• Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best‑in class benefits for families.

• Beyond the Basics: From retail discounts to referral incentive awards—small perks can make a big difference.

For more information on benefits by country visit: https://spgbenefits.com/benefit-summaries

Global Hiring and Opportunity at S&P Global:

At S&P Global, we are committed to fostering a connected andengaged workplace where all individuals have access to opportunities based on their skills, experience, and contributions. Our hiring practices emphasize fairness, transparency, and merit, ensuring that we attract and retain top talent. By valuing different perspectives and promoting a culture of respect and collaboration, we drive innovation and power global markets.

Recruitment Fraud Alert:

If you receive an email from a spglobalind.com domain or any other regionally based domains, it is a scam and should be reported to [e-mail]. S&P Global never requires any candidate to pay money for job applications, interviews, offer letters, “pre‑employment training” or for equipment/delivery of equipment. Stay informed and protect yourself from recruitment fraud by reviewing our guidelines, fraudulent domains, and how to report suspicious activity here.

Equal Opportunity Employer

S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law. Only electronic job submissions will be considered for employment.

US Candidates Only:

If you need an accommodation during the application process due to a disability, please send an email to [e-mail] and your request will be forwarded to the appropriate person.

20 - Professional (EEO-2 Job Categories-United States of America), IFTECH202.2 - Middle Professional Tier II (EEO Job Group)

Job ID: 332460

Posted On: 2026-11-01

Location: Princeton, New Jersey, United States