Network Security Engineer

About the Role: Grade Level (for internal use): 11Role Summary We are seeking a Network Security Engineer to design, implement, maintain, and improve security controls across enterprise network environments. The engineer will protect connectivity through firewalls, secure remote access, network segmentation, and threat prevention, while maintaining reliable access to business services. This role partners with network engineering, security operations, infrastructure, and application teams to troubleshoot issues, address security risks, and deliver secure network changes. Team:- S&P Global's Corporate Cybersecurity team is at the heart of protecting enterprise infrastructure that powers trusted financial intelligence worldwide. Our network security function works collaboratively across infrastructure, application, and security operations disciplines — combining technical rigour with a commitment to continuous improvement. We take ownership of outcomes, raise the bar collectively, and treat every network change as an opportunity to strengthen the organization's security posture. Key Responsibilities:- Defend enterprise network boundaries by configuring, administering, and troubleshooting firewalls, security policies, NAT, and intrusion detection and prevention controls — directly reducing risk exposure across S&P Global's global infrastructure. Embed least-privilege security by implementing and maintaining network segmentation and access controls across internal, perimeter, and remote-access environments, ensuring every connection is intentional, documented, and justified. Enable secure global connectivity by supporting site-to-site and remote-access VPN services, including secure configuration, authentication integration, and end-to-end connectivity troubleshooting at enterprise scale. Govern network access risk by reviewing firewall and network access requests, validating business requirements, assessing risk, and removing obsolete or overly permissive rules — keeping the perimeter tight and audit-ready. Accelerate incident response by partnering with security operations during investigations, analyzing packet captures and device logs, and implementing approved containment and recovery measures. Build operational resilience by hardening network security devices, coordinating patching and firmware upgrades, remediating vulnerabilities, and automating repeatable configuration checks with appropriate review and safeguards. Required Qualifications:- Education: Bachelor's degree in Computer Science, Information Technology, or Cybersecurity Experience: 7+ years of hands-on experience implementing and supporting network security controls in production enterprise environments Technical Skills: Demonstrated expertise in TCP/IP, subnetting, routing, switching, DNS, and Network Address Translation across production enterprise environments