Cybersecurity Engineer For Edge Network Security

Experteer Overview In this role you design and operate Roche’s perimeter and cloud security stack, focusing on edge defense and multi-cloud protection. You’ll drive end-to-end deployment, modernization, and automation of NGFW, DDoS mitigation, and ZTNA, enabling secure access across global networks. You work with Cloud, Infra, and Incident Response teams to sustain a resilient security posture. This opportunity lets you shape a scalable security platform in a mission-driven, inclusive environment.Compensaciones / Beneficios - Lead end-to-end deployment, configuration, and maintenance of Next-Generation Firewalls (Palo Alto, Fortinet) with high availability and optimal inspection across global entry points - Architect and implement ZTNA solutions to replace legacy VPNs and enforce granular, identity-aware access policies - Engineer and manage cloud-native security controls across AWS, Azure, and GCP for consistent security posture in hybrid/multi-cloud - Design and refine DDoS protection strategies and automated threat prevention policies (SSL decryption, IPS/IDS) for critical infrastructure - Oversee edge solutions from design to global rollout and continuous optimization, ensuring reliable, scalable security controls - Proactively identify edge computing and SASE trends to inform product roadmap and maintain competitive advantage in network defense - Serve as lead engineer for complex network security escalations and perform deep-packet analysis for long-term fixes - Develop advanced monitoring dashboards and telemetry for real-time visibility into edge traffic and security health - Manage security policies as code and improve automation workflows and cross-platform orchestration - Build automated workflows and APIs to enable internal dev teams to consume edge security services autonomously - Available for on-call support on a rotating schedule to ensure continuity of global edge security servicesResponsabilidades - Bachelor’s degree in Computer Science, Software Engineering, Information Security, or related field - 5+ years designing and managing enterprise-grade firewall environments (Palo Alto and/or Fortinet) - Proven experience implementing network security controls in at least two major cloud providers (AWS, Azure, or GCP) - Hands-on experience with Palo Alto NGFWs (TLS inspection, user identification, WildFire, Threat Prevention, URL Filtering, GlobalProtect) - Automation experience using Ansible, Terraform, or Python to manage security infrastructure at scale - Experience handling security controls in large, global environments with diverse device profiles - Experience in highly regulated industries (Pharma, Healthcare, Finance) is a plus - NGFW, DDoS mitigation, ZTNA and SASE familiarity - Cloud networking fundamentals and protocols (VPCs, VNETs, Transit Gateways, Cloud Firewalls)Requisitos principales -