Title: Zero Trust Network Ops Engineer Region: APACCountry: India

What you will do:

As part of Johnson Controls’ global Network Security Operations function, the Zero Trust Network Operations Engineer is responsible for the day‑to‑day operation, monitoring, support, and lifecycle management of the enterprise network security infrastructure. This role focuses on maintaining availability, enforcing security policies, executing approved changes, and responding to incidents across a large, globally distributed environment.

The environment supports 1,000+ sites and 100,000+ users, including datacenters, manufacturing plants, sales offices, and customer contact centers. Technologies include Cisco, Fortinet, Zscaler, Silver Peak SD‑WAN, Akamai Guardicore, Tufin, Forescout NAC, Microsoft Azure, Google GCP, and related security platforms.

This is a hands-on operational role working closely with global IT operations teams, security partners, and managed service providers to ensure secure, stable, and compliant network services.

How you will do it:

• Operational Support & Maintenance
• Operate and support enterprise network security platforms including firewalls, remote access, cloud security services, proxies, and NAC solutions
• Perform daily monitoring, health checks, and troubleshooting of network security infrastructure
• Ensure high availability and performance of security services across on‑prem and cloud environments
• Incident & Problem Management
• Respond to network security incidents and outages, including triage, containment, and recovery
• Work with SOC, Network, Cloud, and Application teams during security events or service degradations
• Analyze logs and alerts using SIEM tools to support incident investigation
• Change & Configuration Management
• Implement approved firewall rules, policy changes, VPN updates, and security configurations in production environments
• Execute changes following ITIL and change management processes
• Validate changes post‑implementation and support rollback when required
• Lifecycle & Asset Management
• Manage security infrastructure inventory and asset records in CMDB
• Track device lifecycle status, support contracts, renewals, and refresh readiness
• Coordinate hardware/software maintenance, upgrades, and decommissioning activities
• Vendor & Service Provider Coordination
• Work with third‑party vendors and managed service providers to resolve incidents and deliver operational tasks
• Support quote requests, order tracking, and delivery scheduling for security infrastructure
• Ensure vendor work aligns with operational standards and security requirements
• Automation & Continuous Improvement
• Identify opportunities to automate repetitive operational tasks related to firewall rules, monitoring, reporting, and configuration management
• Assist with operational runbooks, standard operating procedures, and knowledge documentation
• Ensure all network asset data is accurate and support contracts are in place.

What we look for:

Required

• Strong hands‑on operational experience supporting enterprise network security environments
• Experience operating on‑prem and cloud security platforms (firewalls, VPNs, proxies, NAC)
• Working knowledge of:
• Fortinet (Forti Gate, Forti Manager, Forti Analyzer)
• NAC solutions (Forescout)
• Zscaler (ZIA / ZPA) or similar cloud security services
• Tufin (Secure Track / Secure Change) for firewall operations
• Experience executing changes in production environments under formal change control
• Familiarity with SIEM tools (e.g., Splunk) for log review and incident support
• Understanding of enterprise security concepts such as DMZs, WAF, DDoS protection, SSL inspection, and secure traffic flows
• Experience working within ITIL-based operational processes (incident, change, problem)
• Strong troubleshooting and operational documentation skills

Desirable

• Exposure to Zero Trust Network Architecture from an operational support perspective
• Experience supporting cloud environments (Azure, GCP, AWS) from a connectivity and security operations standpoint
• Service Now ticketing and CMDB experience
• Basic scripting or automation experience (Python preferred)
• Network or security certifications (Cisco, Fortinet, Zscaler, Tufin)

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or other applicable disciplines.
• Network security Professional level certification such as (Zscaler, Fortinet, Forescout, Guardicore, Tufin, etc)
• CISSP, CEH, CISM or CISA certifications are a plus.

Johnson Controls International plc. is an equal employment opportunity and affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, genetic information, status as a qualified individual with a disability, or any other characteristic protected by law. For more information, please view EEO is the Law. If you are an individual with a disability and you require an accommodation during the application process, please visit www.johnsoncontrols.com/careers.