About this role
About the Role The Network Security team secures Roche's global connectivity through policy-driven, automated infrastructure. As a Cybersecurity Engineer for Secure Access Network, you will play a pivotal role in the end-to-end lifecycle, global adoption, and engineering of our Network Access Control (NAC) and network segmentation systems, bridging policy with technical execution to advance Roche's Zero Trust roadmap. What You'll Do
- NAC & Segmentation Engineering: Deploy and maintain Cisco ISE globally. Design endpoint profiling logic (IoT, Medical, Corporate), Dot1x/MAB workflows, and Cisco TrustSec (SGTs) for software-defined segmentation.
- Perimeter Security: Deploy and support Palo Alto Next-Generation Firewalls (NGFW) in high-availability configurations (Active/Active and Active/Passive).
- Automation & Compliance: Manage security policies as code using automation workflows to eliminate manual friction. Implement automated network access policies based on device compliance.
- Operations & Visibility: Serve as the escalation lead for complex network security incidents, providing root-cause analysis and long-term architectural fixes. Build dashboards for real-time visibility into the connected landscape.
- Enablement: Design self-service tools that allow internal teams to autonomously consume network security controls. What We're Looking For
- Education: Bachelor's degree in Computer Science, Software Engineering, Information Security, or equivalent experience.
- NAC Expertise: 3+ years of hands-on experience designing and managing enterprise Cisco ISE deployments (TrustSec, Dot1x, MAB, and Profiling).
- Firewall Mastery: Proven experience configuring, troubleshooting, and maintaining Palo Alto NGFWs, including SSL decryption and threat prevention.
- Network & Security Foundations: Deep understanding of RADIUS, TACACS+, core routing/switching, and 'Defense in Depth' architectures.
- Leadership & Collaboration: A self-starter capable of managing technical workstreams independently. Strong communication skills to mentor colleagues and build trust with cross-functional stakeholders. Nice to Have
- DevOps & Automation: Proficiency with Ansible, Terraform, GitHub (IaC), CI/CD pipelines, and scripting (Python, PowerShell, or Bash) for API integrations.
- Advanced Networking: Solid foundation in L2/L3 enterprise networking, including routing protocols (BGP, OSPF) and switching (VLANs, VXLAN).
- Regulated Industry: Experience in Pharmaceuticals, Healthcare, or Finance. Relocation benefits are not available for this posting. Compensation & Benefits
- This position also offers an attractive benefits package. Learn more about how we reward our employees at Roche.