Bei Roche kannst du ganz du selbst sein und wirst für deine einzigartigen Qualitäten geschätzt. Unsere Kultur fördert persönlichen Ausdruck, offenen Dialog und echte Verbindungen. Hier wirst du für das, was du bist, wertgeschätzt, akzeptiert und respektiert. Dies schafft ein Umfeld, in dem du sowohl persönlich als auch beruflich wachsen kannst. Gemeinsam wollen wir Krankheiten vorbeugen, stoppen und heilen und sicherstellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und in Zukunft. Werde Teil von Roche, wo jede Stimme zählt.

Die Position The Network Security product makes Roche’s connectivity accessible and secure through actionable, policy-driven processes. The capabilities we provide enable Roche to identify, inspect, and mitigate network-based risks, manage regulatory compliance, and oversee ingress and egress traffic across all layers. Our solutions are delivered through leading-edge security platforms, automation, and orchestration .

You’ll be working within the Network Security Product area. This area is accountable for the end-to-end delivery of solutions—designing, building, and maintaining the technologies that protect Roche networks and the Internet, whether on-prem or cloud-based. This includes continuous improvement of capabilities like Internet Security Stack, DDoS Protection, Site-to-Site Connectivity (VPN), Network Access Control and Deep Packet Inspection to stay ahead of an ever-evolving threat landscape.

As a

Senior Cybersecurity Engineer (Network Security) , you will act as the primary Subject Matter Expert (SME) for Secure Access Network Services, leading the evolution of Network Access Control, identity-driven security, segmentation and authentication services across Roche's integral enterprise.





Your mission is to ensure that Roche’s network remains resilient and compliant through the continuous evolution of our "Defense in Depth" strategy.

Responsibilities Product Ownership and Technical Leadership

Act as the primary Subject Matter Expert (SME) for Secure Access technologies, providing deep technical expertise in the evaluation and selection of emerging security tools.

Drive the long-term technical roadmap for network access, ensuring all initiatives are strictly aligned with Roche's Zero Trust security architecture and strategy.

Partner with business units to translate high-level security requirements into actionable, scalable technical initiatives and functional policies.

Provide mentorship and technical leadership to junior engineers, fostering a culture of continuous learning and operational excellence within the team.

Identity-Based Access and Authentication

Design, deploy, and maintain robust authentication solutions utilizing protocols such as 802.1X, EAP-TLS, EAP-TEAP, RADIUS, TACACS+, SAML, and MFA.

Integrate disparate security platforms with enterprise Identity Providers (IdPs) to ensure a seamless and secure authentication flow across the environment.

Architect and manage highly available authentication services to support Roche's global workforce and critical business operations.

Network Access Control (NAC)



and Segmentation

Lead the end-to-end lifecycle management of Cisco ISE deployments, including software upgrades, capacity planning, and platform optimization.

Develop and refine endpoint profiling techniques to accurately identify and secure corporate, medical, and IoT devices.

Implement advanced access control mechanisms, including Dot1x, MAC Authentication Bypass (MAB), Guest Access, and posture-based authorization.

Design and oversee the implementation of Cisco TrustSec and Scalable Group Tag (SGT)-based micro-segmentation to reduce the network attack surface.

Operational Excellence and Automation

Serve as a senior point of escalation for complex technical incidents, performing deep root-cause analysis to prevent recurrence.

Develop and maintain comprehensive observability, monitoring, and reporting dashboards to track platform health and security compliance.

Advocate for and implement Infrastructure-as-Code (IaC) principles and security automation to improve deployment speed and consistency.

Build and optimize API-driven integrations and self-service capabilities to empower other IT teams while maintaining security standards.

Global Operations

Ensure secure and reliable connectivity for tens of thousands of endpoints across diverse global regions.

Collaborate effectively with globally distributed product squads and stakeholders to deliver integrated security solutions.

Qualifications Education / Experience

Educational Background: Bachelor’s degree in Computer Science, Software Engineering, Information Security, or a related technical field.

Network Access Control Mastery: 5+ years of hands

📌 Senior Cybersecurity Engineer for Secure Access Network (Madrid)
🏢 Roche Holding
📍 Madrid