Associate Director, Cloud Network Engineer

Grade Level (for internal use): 12

The Team:
Global Network Services is a high-impact, globally distributed engineering team responsible for designing, securing, and automating S&P Global's cloud and hybrid network infrastructure. The Cloud Network Engineering team operates at the forefront of GCP adoption, network automation, and security platform modernization — combining hands‑on engineering rigor with infrastructure‑as‑code discipline to deliver a cloud network estate that is faster to provision, safer to operate, and built to scale.

You will work both autonomously and collaboratively, with direct influence over the standards and architecture that underpin business‑critical connectivity across the enterprise.

You will shape how S&P Global builds and secures its Google Cloud network. Your designs will determine the scalability, segmentation and performance of GCP connectivity for business‑critical applications, and the automation you write will become the standard way those networks are provisioned. Through the Palo Alto egress and inspection platform, you will directly strengthen our security posture, reducing data‑exfiltration risk and replacing inconsistent legacy controls with centrally governed, observable policy.

The result is a cloud network that is faster to deliver, cheaper to operate and materially harder to misconfigure.

• Own the enterprise GCP network architecture — design, deploy and manage GCP network services including VPCs/Shared VPC, Cloud Interconnect, Cloud Router, Cloud NAT, Cloud DNS, Cloud Load Balancing and Private Service Connect across multi-project, multi-folder environments, including hierarchical firewall policies, VPC Service Controls and hybrid connectivity to on-premises and other cloud providers via BGP and routing policy.
• Build and maintain Terraform modules for GCP and multi‑cloud network provisioning; develop Python and Ansible automation to eliminate manual network provisioning, reduce configuration drift, and materially shorten delivery timelines across the network estate.
• Establish and operate CI/CD pipelines for network change delivery — including automated validation, policy‑as‑code checks, pre‑deployment testing, and controlled rollback — setting version‑controlled, peer‑reviewed, modular engineering standards across shared automation repositories.
• Design, deploy and operate Palo Alto Networks VM‑Series firewalls at enterprise scale — including autoscaling deployments, centralized policy management via Panorama and Strata Cloud Manager (SCM), full security policy configuration (App‑, URL filtering, anti‑spyware, decryption), and integration with SIEM and observability tooling; contribute to the migration of legacy firewall platforms onto the Palo Alto estate.
• Drive network segmentation and security posture across cloud, data center, and hybrid infrastructure — partnering with Security, Info Sec, application, and infrastructure teams to ensure designs meet enterprise governance, audit, and compliance requirements; support egress proxy platform onboarding and phased policy enforcement.
• Serve as the senior technical authority for GCP networking across engineering and operations — troubleshooting complex network failures across hybrid environments, participating in on‑call rotation, delivering approved changes within maintenance windows, and identifying continuous improvement opportunities to reduce risk, optimise capacity, and elevate engineering standards.

• Proven experience (10+ years) in enterprise networking, including significant hands‑on experience in large‑scale cloud environments.
• Hands‑on experience designing, deploying and operating Palo Alto…