What you will do

    As part of the global Zero Trust team, you will serve as the strategic and technical owner of the enterprise Network Access Control (NAC) platform. Working within a shared-responsibility model, you will focus on defining security policies, driving 3rd-party integrations, and enhancing device visibility, while partnering with the Network team who manages the underlying infrastructure.

    You will act as the design authority, defining the global Zero Trust network micro-segmentation strategy and driving cross-functional teams to execute it.

    How you will do it

    • Zero Trust Segmentation Pilots: Drive the end-to-end execution of network segmentation initiatives, transitioning from monitor-only phases to active enforcement via VLAN assignments and ACLs.

    • Dynamic Trust Profiling: Architect and refine the platform's Trust Model. Build multi-property assessments to accurately categorize a large-scale deployment of IT, IoT, and OT devices, effectively eliminating security blind spots for unmanaged assets.

    • Incident Response (IR) Quarantining: Partner with SecOps and IR teams to build automated, on-demand quarantining capabilities. Develop integrated workflows to instantly isolate rogue, compromised, or non-compliant endpoints.

    • Advanced Discovery & Integrations: Dictate requirements for enhanced network visibility (e.g., leveraging passive discovery techniques). Fully own the integration of the NAC platform with the broader security ecosystem, including EDR, MDM, ITSM, and cloud-based risk reporting tools.

    • Platform Governance & Automation: Design and enforce granular Role-Based Access Control (RBAC) to ensure the Principle of Least Privilege. Develop automated workflows (via REST APIs or low-code platforms) to streamline operations and aggressively reduce manual MAC address whitelisting.

    What we look for

    Required

    • Strong hands-on engineering experience with enterprise NAC platforms (Forescout or Cisco ISE), specifically focused on advanced policy creation and device profiling.

    • Deep understanding of Zero Trust Architecture, IoT/OT device classification, and building "Semi-Trust" logic for unmanaged network assets.

    • Ability to act as a technical authority, defining security policies and collaborating effectively with network infrastructure teams to execute changes.

    • Solid knowledge of core network security concepts, including network segmentation, VLAN assignments, 802.1X, RADIUS, and DHCP/SNMP protocols.

    Preferred

    • Relevant NAC Certifications (e.g., Forescout FSCA/FSCP or Cisco ISE equivalent).

    • Familiarity with NAC cloud-based reporting, vulnerability data enrichment, and risk-based security scoring.

    • Experience leveraging REST APIs to build automated security response workflows and integrating with asset management or security tools.

    About Us

    Johnson Controls, a global leader in thermal management, mission-critical building systems, energy efficiency, and decarbonization, helps customers use energy more productively, reduce carbon emissions, and operate with the precision and resilience required in rapidly expanding industries such as data centers, healthcare, pharmaceuticals, advanced manufacturing, and higher education.

    For more than 140 years, Johnson Controls has delivered performance where it really matters. Backed by advanced technology, lifecycle services and an industry-leading field organization, we elevate customer performance, turn goals into real-world results and help move society forward.

    We are committed to diversity and inclusion and believe that different perspectives make us stronger. By encouraging open dialogue and valuing individuality, we strive to be one of the most desirable places to work.

    #LI-BB1

    #LI-Hybrid

  • *
    *
    *
    *
    *
    *
    Import LinkedIn profile
    or

    My Information

    My Experience

    Application Questions

    Review

    My Information

    My Experience

    Application Questions

    Review

    *

    Contact Information
    I confirm that I am submitting this electronic application on my own behalf, and not on behalf of any other person, and that the information contained in this application is my own personal information. I hereby affirm that the information provided during the application process and any accompanying documents attached including my resume/CV or provided during any discussion or interviews, are true and complete to the best of my knowledge. To the extent permitted by applicable local law, I authorize Johnson Controls and its affiliates, subsidiaries and operating segments (collectively, the Company) to investigate all statements in this application and accompanying documents and to secure any necessary information from all my employers, references, and educational institutions.

    I understand that should I receive an offer of employment with Johnson Controls, such offer is conditional on successful completion of all aspects of the application process including such background and reference checks as are applicable and permitted under local law. Submission of this electronic application by me does not constitute to me an offer of employment, an employment agreement or any other contractually binding commitment by Johnson Controls.

    I understand and agree that the information submitted by me will be used, disclosed and stored in accordance with Johnson Control's Privacy Notice, which I have fully reviewed and accept. For individuals located in the United States, applicants are not required to provide any age related information and/or graduation date(s). We will transfer your personal information across borders in accordance with the Privacy Notice. To the extent permitted by applicable local law, by clicking the button below, you consent to the cross-border transfer of your personal information. For individuals located in China: please read the Addendum – Rules on Cross Border Transfer of personal information for China (HR Management). By clicking the button below, you consent to Johnson Controls collecting, processing and transferring your personal information (including sensitive personal data) in accordance with our Privacy Notice and the Addendum for China.

    To provide you with the most effective recruiting process, Johnson Controls may use artificial intelligence (“AI”) to help us better understand how your candidate information matches the requirements of the role you have applied to. We may process your answers to the application and qualification questions, information in your resume, and, if applicable, information from your Johnson Controls personnel record, using tools that rely on AI. All hiring decisions will be made by the hiring team after considering your candidate profile in full. These tools help us to match the information provided by you with the job and preferred qualifications. All hiring decisions will be made by our hiring team after considering your candidate profile in full, and the use of AI insights is just one of the tools and one of numerous factors that we use to help us evaluate candidates and reach a decision.

    Johnson Controls would also like to consider you for additional and future job openings, and we may use AI to help with this process. These AI tools help us understand how your candidate information matches the requirements of future job openings (using the same process as described above). Johnson Controls recruiters may use these insights to help them decide whether to reach out to you to regarding a future job opening. If you are located in the United Kingdom or European Union, the use of the AI insights is necessary for Johnson Controls’ legitimate interests to provide a streamlined and efficient recruitment process, and to consider you for future roles. Please note, the use of AI insights is just one of the tools and one of many factors our recruiters use to help evaluate candidates for upcoming roles.

    DO NOT E-SIGN UNTIL YOU HAVE READ THE ABOVE STATEMENT.
    *
    Work Experience
    Work Experience
    Remove
    + Add work experience
    Education
    Education
    Remove
    + Add education
    Skills
    Please provide your relevant Skills
    Websites
    Add any relevant websites (include https:// in URL)
    Website
    Remove
    + Add websites
    Application Questions

    Personal Information
    Johnson Controls values a diverse and inclusive workplace. Providing this information will help us to ensure our recruitment practices promote equality of opportunity.
    Your response to the self-identification questionnaire below is voluntary. It is however mandatory to answer the questions, even if you choose not to provide the information.
    The information will be kept anonymous and your answer will be treated with the strictest confidence and protected from misuse. We assure you that your answers will be used only for the purposes of monitoring our equal opportunities policy and will not be used by us to make any unlawful decisions affecting you, whether in a recruitment exercise or during the course of any employment with us.

    You are not obliged to provide this information and you will not suffer any penalty if you choose not to do so.
    My Information
    Edit Hide
    My Experience
    Edit Show
    Application Questions
    Edit Show
Go to Top