Senior Cloud Network Security Engineer

About the role

Roche is seeking a Senior Cloud Network Security Engineer to lead the design, implementation and operation of security controls across its multi‑cloud environment. You will be responsible for protecting the organization’s digital front door by building high‑performance traffic inspection solutions on AWS, Google Cloud Platform and Azure.

Key responsibilities

• Design and develop robust cloud network infrastructure across AWS, GCP and Azure, using Palo Alto VM‑Series firewalls for deep packet inspection.
• Configure, manage and upgrade Palo Alto solutions (VM‑Series, Panorama) in production, including complex migrations.
• Automate deployment and configuration of security controls with Terraform, Ansible and Python pipelines.
• Implement and maintain security features such as App‑ID, User‑ID, WildFire, Threat Prevention, SSL decryption and GlobalProtect to enforce a Zero‑Trust posture.
• Manage security policies as code, improve automation workflows and orchestrate cross‑platform security operations.
• Troubleshoot advanced networking and security issues related to cloud‑native routing, load balancing and firewall inspection.

Required profile

• Bachelor’s degree in Computer Science, Software Engineering, Information Security or a related technical field.
• Minimum 3 years of hands‑on experience with Palo Alto Next‑Generation Firewalls, including TLS inspection and GlobalProtect.
• Proven experience securing workloads in at least two major cloud platforms (AWS, Azure, GCP).
• Demonstrated ability to use IaC tools (Terraform, Ansible) and scripting (Python or Go) to manage security infrastructure at scale.

Required skills

• Palo Alto VM‑Series and Panorama
• AWS, Google Cloud Platform, Azure
• Terraform, Ansible, Python, Go
• Network protocols: BGP, OSPF, DNS, TLS/SSL
• Security features: App‑ID, User‑ID, WildFire, Threat Prevention, SSL Decryption, GlobalProtect
• GitHub for version‑controlled configurations