Cybersecurity Engineer – Secure Access Network

About the role

The Network Security team at Roche secures global connectivity through policy‑driven, automated infrastructure. As a Cybersecurity Engineer for Secure Access Network, you will drive the end‑to‑end lifecycle, global adoption, and engineering of Network Access Control (NAC) and network segmentation systems, supporting the Zero Trust roadmap.

Key responsibilities

• Deploy and maintain Cisco ISE globally, designing endpoint profiling, Dot1x/MAB workflows, and Cisco TrustSec for software‑defined segmentation.
• Configure and support Palo Alto NGFWs in high‑availability configurations, including SSL decryption and threat prevention.
• Automate security policies as code using Ansible, Terraform, and scripting to eliminate manual friction.
• Lead escalation for complex network security incidents, providing root‑cause analysis and architectural fixes.
• Build dashboards for real‑time visibility and design self‑service tools for internal teams.

Required profile

• Bachelor’s degree in Computer Science, Information Security or equivalent experience.
• 3+ years hands‑on experience with Cisco ISE deployments (TrustSec, Dot1x, MAB, profiling).
• Proven experience with Palo Alto NGFW configuration and troubleshooting.
• Strong understanding of RADIUS, TACACS+, routing/switching and defense‑in‑depth architectures.
• Self‑starter with ability to manage technical workstreams independently and mentor colleagues.

Required skills

• Cisco ISE, Cisco TrustSec, Dot1x, MAB
• Palo Alto Next‑Generation Firewalls
• Ansible, Terraform, GitHub, CI/CD pipelines
• Python, PowerShell, Bash scripting
• RADIUS, TACACS+, BGP, OSPF, VLAN, VXLAN