[Hiring] Staff Software Engineer @Johnson Controls

Role Description

Our Airwall Zero Trust technology secures mission critical assets around the world. It provides encrypted remote access, protects communication from the edge to the cloud, and makes legacy infrastructure invisible to discovery and attack. For operators running equipment that cannot be patched or taken offline, that combination is the difference between a contained incident and a shutdown.

The Staff Software Engineer, Embedded Networking, is a hands-on engineering role at the core of the product. You will:

• Extend Airwall onto new classes of devices and hardware targets, taking the platform into environments it does not reach today.
• Own the embedded software running on constrained targets, including OpenWRT and ARM-based platforms.
• Work deep in the secure data path: identity-based overlay networking, IPsec and ESP, IKE, tunnel encapsulation, NAT traversal, Layer 2 connectivity carried over Layer 3, and certificate-based identity backed by PKI.
• Modernize the Airwall technology stack, retiring what has aged and raising the ceiling on performance, observability, and maintainability.
• Diagnose hard networking failures in live customer environments, down to packet-level analysis.
• Contribute to core codebases and raise the standard for code quality, testing, and performance.
• Mentor engineers across the team and serve as a technical role model.

Qualifications

• 8+ years shipping production networking software, with significant time on embedded or kernel-adjacent systems.
• Deep expertise in C, C++, or Rust, with the ability to work across all three.
• Command of the networking stack from Layer 2 through Layer 4, including the judgment to reason about a failure from the wire upward and read a packet capture unaided.
• Hands-on embedded Linux experience on resource-constrained hardware, or OpenWRT.
• Working knowledge of encrypted transport such as IPsec, ESP, and IKE, along with certificate-based identity and PKI.
• A track record of shipping into environments where downtime carries real consequences.
• Clear communication and the judgment to work well across product and engineering teams.

Requirements

• Experience with Host Identity Protocol (RFC 7401) or another identity-based networking overlay.
• Background in operational technology or industrial control systems, including protocols such as BACnet or Modbus.
• Exposure to hardware bring-up, board support packages, or firmware release engineering.
• Contributions to open source networking projects.

Benefits

• HIRING SALARY RANGE: $130,000 - $180,000 (Salary to be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data.)
• This role offers a competitive Bonus plan that will take into account individual, group, and corporate performance.
• This position includes a competitive benefits package.