Cybersecurity Engineer - Secure Access Network

About the role

Roche is looking for a Cybersecurity Engineer focused on Secure Access Network to drive the end‑to‑end lifecycle of security products within the Network Security Product area. You will translate high‑level security policies into high‑performance technical solutions and ensure robust protection across the enterprise network.

Key responsibilities

• Lead global adoption and engineering of Network Access Control (NAC) and network segmentation, deploying and maintaining Cisco ISE, endpoint profiling, Dot1x, MAB and Guest Portals.
• Architect and maintain Cisco TrustSec (SGTs) for software‑defined segmentation aligned with the Zero Trust roadmap.
• Deploy and support Palo Alto Next‑Generation Firewalls in high‑availability configurations, including SSL decryption and threat prevention.
• Automate security policy management as code using Ansible, Terraform or Python, create visibility dashboards and perform root‑cause analysis for escalations.
• Own the NAC product lifecycle from concept to production, managing technical workstreams with minimal supervision.

Required profile

• Bachelor’s degree in Computer Science, Software Engineering, Information Security or a related technical field.
• 3+ years of hands‑on experience designing and managing enterprise‑grade NAC solutions, especially Cisco ISE.
• Proven experience configuring and maintaining Palo Alto NGFWs, including HA environments.
• Strong background in automation engineering using Ansible, Terraform or Python.
• Deep understanding of RADIUS, TACACS+, and core L2/L3 routing and switching as they relate to security enforcement.

Required skills

• Cisco ISE (TrustSec, Dot1x, MAB, profiling)
• Cisco TrustSec (SGTs)
• Palo Alto NGFW (HA, SSL decryption, threat prevention)
• Ansible
• Terraform
• Python
• RADIUS
• TACACS+
• L2/L3 routing and switching
• Infrastructure as Code (IaC)
• GitHub version control and CI/CD pipelines
• PowerShell or Bash scripting