below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$183,725–$254,750.
Based on 240 similar postings.
Employer
About S&P Global
S&P Global delivers Essential Intelligence® that shapes decision making. We provide the world’s leading organizations with the right data, connected technologies and expertise they need to move ahead.
S&P Global currently has
39 open roles
on FindRole.
Listed pay typically runs
$145,245–$200,000
across 36 roles with salary data.
JOB TITLE: Zero Trust & Microsegmentation Engineer
The Cybersecurity Engineering team seeks a Zero Trust & Microsegmentation Engineer to architect and enforce enterprise-wide micro-segmentation policies across applications, servers, workloads, and cloud environments. You will map and validate application communication flows, translating dependencies into precise firewall rules, ACLs, and Zero Trust Network Access controls. Daily responsibilities include performing traffic-flow analysis using network telemetry, NetFlow, and packet captures to validate segmentation outcomes. You will also lead remediation for connectivity gaps and automate policy deployment. Required expertise includes TCP/IP, DNS, DHCP, routing, switching, VLANs, NAT, and load balancing. Preferred skills include Akamai Guardicore, Illumio, Zscaler, AWS, Azure, GCP, Kubernetes, Terraform, Ansible, Python, PowerShell, and certifications like CCNP or CISSP. This role solves the technical challenge of reducing attack surfaces and eliminating risky east-west traffic.
Architect and enforce enterprise-wide micro-segmentation policies across applications, servers, workloads, and cloud environments.
Map and validate end-to-end application communication flows to create precise firewall rules and ZTNA controls.
Perform traffic-flow analysis using network telemetry, NetFlow, and packet captures to validate segmentation outcomes.
Lead remediation efforts by identifying and closing overly permissive connectivity gaps and approving network change requests.
Automate segmentation policy deployment, compliance reporting, and validation to ensure operational resilience.
Develop documentation standards and labeling strategies to support cloud adoption and data-center transformations.
What we're looking for
5+ years of experience in network engineering, network security, cybersecurity, or infrastructure engineering.
Demonstrated expertise in TCP/IP, DNS, DHCP, routing, switching, VLANs, NAT, load balancing, and enterprise firewall management.
2+ years of hands-on implementation of micro-segmentation, network segmentation, or Zero Trust architectures in enterprise environments.
Ability to analyze application dependencies and translate port/protocol/authentication requirements into firewall rules, ACLs, or access-control policies.
Hands-on experience with enterprise micro-segmentation platforms like Akamai Guardicore, Illumio, or Zscaler (preferred).
Experience with cloud networking and security controls in AWS, Azure, or GCP (preferred).
Experience with Kubernetes/container networking and workload segmentation (preferred).
Experience deploying security policy automation using Terraform, Ansible, Python, or PowerShell (preferred).
Zero Trust
Identity and Access Management
Automation and Orchestration
Cloud Security
Micro-segmentation
AWS
Azure
GCP
Oracle
NGFW
AI
Machine Learning
Big Data
IoT
OT
Attribute-based Access Control
Zero Trust
ICAM
SAML
OAuth 2.0
OpenID Connect
Active Directory
LDAP
SailPoint
Radiant Logic
Ping Federate
Delinea
Python
Ansible
Terraform
Puppet
Chef
PowerShell
Splunk
Elastic
Logstash
Kibana
Cribl
Confluent
Windows
Linux
TCP
IP
DNS
DHCP
HTTP
HTTPS
IDS
IPS
Firewalls
AI
ML
NIST 800-207