Network Security Engineer - RDT Security Platforms
Roche
San Jose, Costa RicaPosted 5 days agoDiscoveredMatch locked
Full time3+ years exp
About the role
At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.
The Position
The Network Security team secures Roche's global connectivity through policy-driven, automated infrastructure. In this role, you will architect, implement, and maintain secure network segmentation environments using Fortinet and Palo Alto firewalls. You will build detailed implementation plans, manage firewall deployments, handle complex policies, VPNs, and routing, and execute system migrations. Additionally, you will troubleshoot advanced network issues, defend against emerging threats, and provide rotating on-call operational support.
The Opportunity
- Design and develop robust network segmentation strategies, architectures, and detailed technical documentation using Fortinet and Palo Alto firewalls.
- Configure, deploy, and manage Fortinet FortiGate (including FortiManager/FortiAnalyzer) and Palo Alto Networks firewalls (including Panorama, App-ID, User-ID, WildFire, and URL Filtering).
- Implement firewall policies, NAT rules, IPSec/SSL VPNs, and L2/L3 routing (BGP, OSPF, VLANs, VXLAN) to enforce network segmentation.
- Perform migrations, upgrades, and advanced troubleshooting of network and security infrastructure.
- Collaborate with network architects and cross-functional product squads to integrate firewall controls into existing environments, including manufacturing sites.
- Stay current with emerging security threats and participate in a rotating on-call support schedule.
Who you are
- Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field preferred.
- 3+ years of experience designing, deploying, and supporting Next-Generation Firewalls with a strong enterprise networking background.
- Extensive hands-on technical experience with Fortinet (Fortinet Security Fabric) and Palo Alto Networks platforms.
- Professional security certifications are highly desirable (e.g., Fortinet NSE 4-8, Palo Alto PCNSA/PCNSE, CCNP Security, or CISSP).
- Experience with scripting languages (Python, PowerShell), DevOps/Automation tools (Ansible, Terraform, Git, Jenkins), cloud platforms (AWS), or manufacturing/validated environments is a strong plus.
- Strong communication, facilitation, and conflict resolution skills with a proven ability to align complex stakeholder networks.
Who we are
A healthier future drives us to innovate. Together, more than 100'000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.
Let's build a healthier future, together.
Not included in the source posting: benefits.
Skills
ansibleawscisspcybersecuritydevopsgitjenkinspythonterraform
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.