Experteer Overview

Si está considerando enviar una solicitud, asegúrese de pulsar el botón de solicitar de abajo después de leer la descripción completa.
As SME for Network Security, you will design, build, and improve secure access and observability capabilities across on-premise and cloud networks. You’ll lead global Cisco ISE, WAC, and Palo Alto NGFW initiatives, driving automated, policy-driven security and real-time visibility. You work closely with Cloud, Infrastructure, and Incident Response teams to sustain a resilient security posture. This role combines hands-on engineering with a leadership role in building a cross-functional observability framework. You’ll contribute to Roche’s mission of safe, accessible healthcare by strengthening network protection and operational excellence.

Compensaciones / Beneficios
• Design and architecture for global Cisco ISE deployments and Wired Access Control strategies
• Lead Palo Alto NGFW architectures, including threat prevention, decryption, and egress/ingress traffic management
• Continuous improvement of NAC policies, SGT propagation, and firewall rule-sets
• Lead implementation of complex integral migrations and feature rollouts
• Develop a full-stack custom observability framework (front-end and back-end)
• Build automated integrations with external data sources (CMDB, IPAM)



for real-time asset inventory
• Design telemetry ingestion and visualization from ISE, WAC, and Palo Alto using APIs, SNMP, and Syslog
• Provide root-cause analysis for escalations and implement automated architectural fixes
• Create dashboards and reports for real-time visibility of the connected landscape
• Manage security policies as code and improve cross-platform automation and orchestration
• Design self-service capabilities enabling internal teams to consume network security controls autonomously

Responsabilidades
• Bachelor in Computer Science (or related field)
• 3+ years designing, implementing, xqbhyrx and managing enterprise NAC solutions (Cisco ISE)
• Proven experience with Palo Alto NGFWs, including SSL decryption and threat prevention
• Automation experience with Ansible, Terraform, or Python at scale
• Experience in large, global environments with diverse device profiles
• Experience in regulated industries (pharma, healthcare, or finance) is a plus
• Cisco ISE TrustSec, Dot1x, MAB, and Profiling knowledge
• Scripting in Python, PowerShell, or Bash; REST API integrations
• Networking fundamentals (RADIUS, TACACS+, routing/switching) and segmentation (SGTs)

Requisitos principales
•

📌 Cybersecurity Engineer for Network Security (Madrid)
🏢 Roche
📍 Madrid