Senior Cybersecurity Engineer (Network Security)

The Network Security product makes Roche’s connectivity accessible and secure through actionable, policy‑driven processes. The role focuses on designing, building, and maintaining the technologies that protect Roche networks and the Internet, whether on‑prem or cloud‑based.

Responsibilities
- Product Ownership and Technical Leadership
- Act as the primary SME for Secure Access technologies and evaluate emerging tools.
- Drive the long‑term technical roadmap for network access aligned with Roche’s Zero Trust strategy.
- Partner with business units to translate high‑level security requirements into actionable, scalable initiatives and policies.
- Mentor junior engineers and foster continuous learning.
- Identity‑Based Access and Authentication
- Design, deploy, and maintain authentication solutions using protocols such as 802.1X, EAP‑TLS, EAP‑TEAP, RADIUS, TACACS+, SAML, and MFA.
- Integrate security platforms with enterprise IdPs to provide a seamless authentication flow.




- Architect highly available authentication services supporting Roche’s global workforce.
- Network Access Control (NAC) and Segmentation
- Manage Cisco ISE deployments, including upgrades, capacity planning, and optimization.
- Develop endpoint profiling techniques to secure corporate, medical, and IoT devices.
- Implement access control mechanisms such as Dot1x, MAB, Guest Access, and posture‑based authorization.
- Design and oversee TrustSec and SGT‑based micro‑segmentation.
- Operational Excellence and Automation
- Escalate and analyze complex incidents to prevent recurrence.
- Maintain observability, monitoring, and reporting dashboards.
- Apply IaC principles and security automation to improve deployment speed and consistency.
- Build and optimize API‑driven integrations and self‑service capabilities.
- Global Operations
- Ensure secure connectivity for thousands of endpoints across integral regions.
- Collaborate with distributed product squads

📌 Senior Cybersecurity Engineer for Secure Access Network (Madrid)
🏢 F. Hoffmann-La Roche
📍 Madrid