Senior Cybersecurity Engineer (Edge Defense)

About the Role Senior Cybersecurity Engineer (Edge Defense) responsible for the end-to-end lifecycle of Roche’s edge and perimeter security products. You will drive the engineering, adoption, and optimization of the Edge security stack, including NGFW, DDoS mitigation, and Zero Trust Network Access, using an automation-first approach to enable secure, scalable access across multi-cloud environments.

What You'll Do

• Edge Architecture & Engineering: Lead the end-to-end deployment, configuration, and maintenance of Next-Generation Firewalls (Palo Alto, Fortinet) with high availability across global entry points; architect and implement ZTNA solutions; manage cloud-native security controls in AWS, Azure, and GCP; design and refine DDoS protection strategies and automated threat prevention policies (SSL decryption, IPS/IDS).
• Product Lifecycle & Evolution: Oversee the delivery of Edge solutions from initial design through build, global rollout, and continuous optimization; ensure that security controls are reliable, scalable, and well-documented; proactively identify emerging trends in Edge computing and SASE to inform the product roadmap.
• Operational Excellence & Visibility: Serve as the lead engineer for complex network security escalations, performing deep-packet analysis and root-cause investigations; develop advanced monitoring dashboards and telemetry for real-time visibility into edge traffic patterns, attack surfaces, and stack health; manage security policies as code while continuously improving automation workflows and cross-platform orchestration; build automated workflows and APIs that allow internal dev teams to consume edge security services (e.g., automated firewall rule requests); on-call readiness on a rotating schedule to ensure global edge service availability.

What We're Looking For

• Educational Background: Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related technical field.
• Perimeter Security Mastery: 5+ years designing and managing enterprise-grade Firewall environments (Palo Alto and/or Fortinet).
• Cloud Security Expertise: Proven track record implementing network security controls in at least two major cloud providers (AWS, Azure, or GCP).
• Perimeter & Inspection Expertise: Proven experience configuring and maintaining Palo Alto NGFW, including TLS inspection, user identification, WildFire, Threat Prevention, URL Filtering, and GlobalProtect.
• Automation Engineering: Proven experience using Ansible, Terraform, or Python to manage network security infrastructure at scale.
• Large-Scale Infrastructure: Experience managing security controls in complex, global environments involving thousands of diverse device profiles.

Nice to Have

• Experience with edge computing and SASE-related initiatives to inform product roadmap.

Compensation & Benefits

• Not disclosed in the posting.