Zero Trust Network Operations Engineer

About the role

As part of Johnson Controls' global Network Security Operations function, this role operates, monitors, supports and manages the lifecycle of the enterprise network security infrastructure on Level 1 and 2. It covers 1,000+ sites and 100,000+ users, including datacenters, manufacturing plants, sales offices and contact centers, using technologies such as Cisco, Fortinet, Zscaler, Silver Peak SD WAN, Akamai Guardicore, Tufin, Forescout NAC, Microsoft Azure, Google GCP and related security platforms.

Key responsibilities

• Operate and support firewalls, remote access, cloud security services, proxies and NAC solutions, and perform daily monitoring, health checks and troubleshooting
• Respond to security incidents and outages, triage, contain and recover them, and analyse logs and alerts with SIEM tools
• Implement approved firewall rules, policy changes, VPN updates and security configurations following ITIL change management, and validate and roll back changes when needed
• Manage security assets in the CMDB, track device lifecycle, support contracts and renewals, and coordinate maintenance, upgrades and decommissioning
• Work with vendors and managed service providers on incidents, quotes, orders and delivery scheduling
• Identify automation opportunities, contribute to runbooks and SOPs, and keep asset data accurate

Required profile

• Hands-on operational experience supporting enterprise network security environments
• Willingness to learn and develop technical expertise
• Availability for regular support of the US market, including afternoon hours
• Preferred: experience with on-prem and cloud security platforms (firewalls, VPNs, proxies, NAC)
• Preferred: ITIL-based processes, familiarity with SIEM tools, understanding of DMZ, WAF, DDoS protection, SSL inspection and Zero Trust architecture, and exposure to Zero Trust from an operational support view

Required skills

• Preferred: Fortinet (FortiGate, FortiManager, FortiAnalyzer), Forescout, Zscaler (ZIA/ZPA), Tufin (SecureTrack/SecureChange)
• Preferred: production change control, SIEM (e.g. Splunk), ITIL, ServiceNow ticketing and CMDB, Python or other scripting/automation
• Preferred: network or security certifications (Cisco, Zscaler, Fortinet, Forescout, Guardicore, Tufin, CISSP, CEH, CISM, CISA)

What we offer

• Initial basic salary of EUR 2,261 - 3,392 per month, plus a 13th-month salary after the first 6 months
• Meal vouchers, flexible benefits budget, retail discounts, private kindergarten/nursery allowance, flexible hours and home office days
• On-site benefits and relocation support with housing allowance if moving to Slovakia