Job Title: Zero Trust Engineer
Location: Bangalore, India
What you will do:
As part of our global Zero Trust team, you will act as the strategic owner, design authority, and visionary architect for our global Infoblox Universal DDI infrastructure. You are expected to bring an "architect mindset" to command the entire Infoblox platform lifecycle. This includes driving global DNS re-architecture, orchestrating complex enterprise domain migrations, and leading advanced security integrations across a massive multi-cloud and on-premises environment. You will govern the platform from a top-down perspective, steering cross-functional teams and vendor professional services to ensure platform stability, optimize modern licensing consumption, and enforce a robust zero-trust network boundary.
How you will do it:
1. Global Platform Governance & Architecture: Command the Infoblox Universal DDI (BloxOne) platform with an architect’s mindset. Define and continuously optimize the global DNS topology across multi-cloud (Azure, AWS, GCP) and on-premises environments to maximize operational efficiency.
2. Complex Domain Migrations: Act as the ultimate technical authority leading large-scale, enterprise DNS migrations from legacy platforms (e.g., Microsoft DNS) to modern DDI solutions. Direct vendor Professional Services and internal cross-functional teams to mitigate technical risks and ensure seamless, zero-downtime cutovers.
3. Advanced DNS Security & Traffic Control: Architect and operationalize native Infoblox security and routing features. Lead strategic initiatives to replace legacy global load balancers with native DNS Traffic Control (DTC), enforce Response Policy Zones (RPZ), and evaluate next-gen capabilities like Threat Defense and Anycast DNS.
4. Proactive Monitoring & Cross-Team Leadership: Dictate the platform's reliability standards by designing a robust, comprehensive monitoring architecture (leveraging API metrics, standard network monitoring tools, and SIEM integrations). Govern overall platform health while collaborating closely with Global Network teams on DHCP and IPAM service consumption.
What we look for:
Required Skills (Must-Haves):
1. Demonstrated architect-level expertise in commanding and designing large-scale enterprise DNS/DDI platforms, specifically Infoblox Universal DDI (BloxOne) and NIOS-X cloud-managed architecture.
2. Strong architectural mindset with a proven track record of leading highly complex, globally distributed Active Directory DNS migrations and multi-cloud DNS topologies.
3. Ability to act as an authoritative technical leader, defining architectural standards, managing vendor relationships (e.g., Professional Services), and driving cross-functional infrastructure changes.
4. Solid knowledge of core networking and DNS security concepts, including DHCP/IPAM integrations, global server load balancing (DTC), and advanced security policies (e.g., RPZ).
.
Desirable Skills (Nice-to-Haves):
1. Infoblox Certifications (e.g., Core DDI Config & Admin or BloxOne equivalents).
2. Experience managing modern token-based DDI licensing consumption models and evaluating DNS-layer security modules.
3. Familiarity with deploying virtual network appliances via public cloud marketplaces (Azure, AWS, GCP).
4. Experience leveraging REST APIs, Python scripting, or similar tools to build automated monitoring workflows, self-service IT catalog integrations, and CMDB enrichment.
Skills Required
- Architect-level expertise with Infoblox Universal DDI (BloxOne) and NIOS-X cloud-managed architecture
- Proven track record leading large-scale enterprise Active Directory DNS migrations and multi-cloud DNS topologies
- Ability to define architectural standards, manage vendor professional services, and lead cross-functional infrastructure changes
- Solid knowledge of core networking and DNS security concepts including DHCP/IPAM integrations, global server load balancing (DTC), and RPZ
- Infoblox certifications (e.g., Core DDI Config & Admin or BloxOne equivalents)
- Experience managing token-based DDI licensing consumption models and DNS-layer security modules
- Familiarity deploying virtual network appliances via public cloud marketplaces (Azure, AWS, GCP)
- Experience leveraging REST APIs, Python scripting, or similar to build automated monitoring workflows and CMDB enrichment
Johnson Controls Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Johnson Controls and has not been reviewed or approved by Johnson Controls.
-
Retirement Support — Retirement support is positioned as a meaningful part of the package through employer 401(k) matching, repeatedly framed as a strong pillar of the overall rewards mix. The matching contribution is described with specific match levels in multiple places, reinforcing perceived value for long-term saving.
-
Leave & Time Off Breadth — Time off is presented as comparatively robust, with multiple paid holiday categories, vacation time, and sick time described as generous or “amazing” in places. Paid time off breadth appears to be a consistent contributor to total rewards attractiveness beyond base pay.
-
Flexible Benefits — Benefits are described as broad and customizable, spanning standard medical/dental/vision plus optional add-ons like pet insurance, identity protection, and legal support. Tuition reimbursement is repeatedly highlighted as a high-value option supporting professional development.
Johnson Controls Insights
What We Do
At Johnson Controls, we transform the environments where people live, work, learn and play. From optimizing building performance to improving safety and enhancing comfort, we drive the outcomes that matter most. Dedicated to protecting the environment, we deliver our promise in industries such as healthcare, education, data centers and manufacturing. With a global team of 100,000 experts in more than 150 countries and over 130 years of innovation, we are the power behind our customers’ mission. Our leading portfolio of building technology and solutions includes some of the most trusted names in the industry, such as Tyco®, York®, Metasys®, Ruskin®, Titus®, Frick®, Penn®, Sabroe®, Simplex®, Ansul® and Grinnell®.
