Working knowledge across several Zero Trust domains
o ZTNA and SSE/SASE
o Microsegmentation
o Identity and access management
o Privileged access
o Conditional access and MFA
o Device trust
o Application and developer-environment access
o Data protection
Experience developing security strategies, architectures and roadmaps, and owning their delivery from design through build, operation and automation.
Enough technical depth to credibly review and challenge designs from senior network and identity engineers.
Experience leading the response to high-severity security incidents. This means coordinating IT, legal and business teams through containment, remediation and post-incident control improvement.
Experience building or scaling a team, not only inheriting one, including managing across regions and planning capacity.
Outstanding communication and presentation skills. You can explain complex technical concepts to non-technical audiences and defend a technical position to senior leadership.
Preferred
Zero Trust certification, such as the CSA Certificate of Competence in Zero Trust (CCZT), Forrester Zero Trust Strategist, or a vendor Zero Trust certification.
Broader security or architecture certification, such as CISSP, CCSP, CISM, SANS (GIAC) or TOGAF.
Hands-on experience with leading Zero Trust platforms, for example
o SSE/ZTNA: Zscaler or Netskope
o Microsegmentation: Guardicore or Illumio
o Identity and IDaaS: Microsoft Entra ID, Okta, Ping Identity or Google Cloud Identity
o Identity governance: SailPoint, Saviynt or equivalent
o Privileged access management
Network security background across on-premises and cloud
o On-premises: firewall policy and rule management, IDS/IPS, network access control, remote access VPN and internet proxies.
o Cloud: cloud proxies, cloud web application firewall and API protection (WAF/WAAP), and Azure or GCP security services.
Cloud security posture management across multi-cloud environments (CSPM/CNAPP).
Security operations experience, including SIEM tools such as Splunk for log analysis and event correlation, and risk-based vulnerability management.
AI security experience, either securing enterprise use of AI or applying AI to security operations.
Exposure to OT and IoT security, including IEC 62443.
Automation experience, such as Python, PowerShell, low-code platforms or ITSM integration.
Experience in a large, regulated enterprise with a legacy estate, M&A activity and real technical debt.
Working knowledge of security and regulatory frameworks, such as NIST CSF, ISO/IEC 27001, SOX, PCI DSS, GDPR and HIPAA.
Johnson Controls International plc. is an equal employment opportunity and affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, genetic information, status as a qualified individual with a disability, or any other characteristic protected by law. For more information, please view EEO is the Law. If you are an individual with a disability and you require an accommodation during the application process, please visit www.johnsoncontrols.com/careers.
