Network Security Engineer - RDT Security Platforms

About the role

The Network Security team secures Roche's global connectivity through policy-driven, automated infrastructure. As a Network Security Engineer on the RDT Security Platforms team, you will architect, implement and maintain secure network segmentation environments using Fortinet and Palo Alto firewalls, while defending against emerging threats and providing rotating on-call operational support.

Key responsibilities

• Design and develop network segmentation strategies, architectures and detailed technical documentation using Fortinet and Palo Alto firewalls.
• Configure, deploy and manage Fortinet FortiGate (including FortiManager/FortiAnalyzer) and Palo Alto Networks firewalls (including Panorama, App-ID, User-ID, WildFire and URL Filtering).
• Implement firewall policies, NAT rules, IPSec/SSL VPNs and L2/L3 routing (BGP, OSPF, VLANs, VXLAN) to enforce network segmentation.
• Perform migrations, upgrades and advanced troubleshooting of network and security infrastructure.
• Work with network architects and cross-functional product squads to integrate firewall controls into existing environments, including manufacturing sites.
• Stay current with emerging security threats and take part in a rotating on-call support schedule.

Required profile

• Bachelor's degree in Computer Science, Information Security, Cybersecurity or a related field preferred.
• 3+ years of experience designing, deploying and supporting Next-Generation Firewalls with a strong enterprise networking background.
• Extensive hands-on experience with Fortinet (Fortinet Security Fabric) and Palo Alto Networks platforms.
• Professional security certifications are highly desirable (e.g. Fortinet NSE 4-8, Palo Alto PCNSA/PCNSE, CCNP Security, CISSP).
• Strong communication, facilitation and conflict resolution skills, with the ability to align complex stakeholder networks.

Required skills

• Fortinet and Palo Alto Networks firewalls
• Scripting languages such as Python and PowerShell
• DevOps/Automation tools such as Ansible, Terraform, Git and Jenkins
• Cloud platforms such as AWS, or manufacturing/validated environments (a strong plus)