Cyber Security Engineer – Edge Defense (Cloud)

About the role

Roche is seeking a Senior Cybersecurity Engineer to design, build and operate cloud network security infrastructure that protects its global digital boundaries across multi‑cloud environments. The role focuses on implementing high‑performance traffic inspection using Palo Alto VM‑Series across AWS, GCP and Azure.

Key responsibilities

• Design and develop robust multi‑cloud network infrastructure on AWS, GCP and Azure, leveraging Palo Alto firewalls for deep traffic inspection.
• Configure, manage and upgrade Palo Alto VM‑Series and Panorama, including complex migrations in production.
• Automate deployment of security solutions using Terraform, Ansible and Python pipelines.
• Implement and maintain App‑ID, User‑ID, WildFire, Threat Prevention, SSL decryption and GlobalProtect to enforce a Zero Trust posture.
• Manage security policies as code, improve automation workflows and orchestrate cross‑platform operations.
• Troubleshoot advanced issues related to cloud‑native routing, load balancing and firewall inspection in multi‑cloud environments.

Required profile

• Bachelor’s degree in Computer Science, Software Engineering, Information Security or a related technical field.
• 3+ years of experience configuring and maintaining Palo Alto NGFWs, including TLS inspection and GlobalProtect.
• Proven experience implementing network security controls in at least two major cloud platforms (AWS, Azure, GCP).
• Hands‑on experience with IaC tools such as Terraform and version control (GitHub).
• Preferred certifications: Palo Alto Networks PCNSE, AWS Certified Security, or Azure Security Engineer Associate.

Required skills

• Palo Alto VM‑Series and Panorama
• Terraform, Ansible, Python (or Go)
• AWS, Azure, GCP
• Network protocols: BGP, OSPF, DNS, TLS/SSL
• Infrastructure as Code, GitHub
• Zero Trust security concepts