Cybersecurity Engineer for Edge Network Security

As a Senior Cybersecurity Engineer (Edge Defense), you will lead the global engineering, adoption, and optimization of Roche’s perimeter and cloud security stack. You will design high-availability architectures, implement Zero Trust Network Access (ZTNA), and leverage an automation-first mindset to manage Next-Generation Firewalls (NGFW) and DDoS mitigation strategies across multi-cloud and on-premise environments.

Responsibilities

• Lead the deployment and maintenance of Next-Generation Firewalls (Palo Alto, Fortinet) and transition legacy VPNs to ZTNA solutions.
• Engineer cloud-native security controls within AWS, Azure, and GCP to ensure consistent security posture.
• Design DDoS protection strategies and automated threat prevention policies including SSL decryption and IPS/IDS.
• Manage the full product lifecycle of edge solutions from design through global rollout and continuous optimization.
• Develop monitoring dashboards, telemetry, and automated workflows to manage security policies as code and reduce operational overhead.
• Provide technical subject matter expertise for complex escalations and participate in an on-call rotation.

Requirements

• Bachelor’s degree in Computer Science, Software Engineering, Information Security, or a related field.
• 5+ years of hands-on experience designing and managing enterprise-grade firewall environments (Palo Alto/Fortinet).
• Proven track record implementing network security controls in at least two major cloud providers (AWS, Azure, or GCP).
• Proficiency in automation tools such as Ansible, Terraform, or Python to manage infrastructure at scale.
• Deep understanding of core network protocols (BGP, OSPF, DNS, TLS/SSL) and security frameworks.
• Strong communication skills with the ability to translate complex security requirements for diverse stakeholders.
• Experience in highly regulated industries like Pharmaceuticals, Healthcare, or Finance is a significant plus.