Depends on how quickly the things needs to be done. Jamf runs policies based on information Jamf Pro has. You can set a policy to run once a device reports it has your internal IP addresses simply enough. However, there will still be a 7-23 minute delay on the policy running as there is a time skew on the device checking in to Jamf to update inventory which is what queues the policies to run. This is a two-way street, when they get home and are no longer on a corp network it will take another 7-23 minutes for the thing to happen to undo the setting.
Honesty, you need to be configuring policies with a network security client on the network side or a VPN client (or similar) on the device side if you need it to be dynamic and flexible.
