Senior Security Engineer – Secure Access & Zero Trust

About the role

Roche is looking for a Senior Security Engineer to join the Secure Access team. You will design, implement and operate secure remote‑access, web‑security and network‑protection solutions across on‑premises, cloud and hybrid environments.

Key responsibilities

• Design, deploy and manage Cloudflare‑based web security, Zero Trust access and GlobalProtect VPN infrastructure.
• Build and maintain automation pipelines and infrastructure‑as‑code using Terraform and GitHub.
• Own configuration management in ServiceNow, ensuring accurate CMDB records and change‑management compliance.
• Ensure security solutions meet regulatory requirements and support audit activities.
• Collaborate with network, identity and cloud teams to deliver integrated secure‑access capabilities.
• Mentor junior team members and promote security best practices.

Required profile

• 5‑7 years of hands‑on security engineering experience, focused on network security and secure access.
• Proven ability to work independently and drive improvements in a regulated environment.
• Strong communication skills and a solution‑oriented mindset.

Required skills

• Cloudflare (Access, Gateway, WAF, CDN)
• Palo Alto GlobalProtect VPN deployment and policy management
• Zero Trust security concepts
• Terraform for infrastructure‑as‑code
• GitHub version control and CI/CD pipelines
• ServiceNow configuration and change management
• Automation scripting and workflow development