At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.
The Position
The Network Security product makes Roche's connectivity accessible and secure through actionable, policy-driven processes. The capabilities we provide enable Roche to identify, inspect, and mitigate network-based risks, manage regulatory compliance, and oversee ingress and egress traffic across all layers. Our solutions are delivered through leading-edge security platforms, automation, and orchestration .
You'll be working within the
Network Security Product
area. This area is accountable for the end-to-end delivery of solutions—designing, building, and maintaining the technologies that protect Roche networks and the Internet, whether on-prem or cloud-based. This includes continuous improvement of capabilities like Internet Security Stack, DDoS Protection, Site-to-Site Connectivity (VPN), Network Access Control and Deep Packet Inspection to stay ahead of an ever-evolving threat landscape.
As a
Senior Cybersecurity Engineer (Network Security),
you will act as the primary Subject Matter Expert (SME) for Secure Access Network Services, leading the evolution of Network Access Control, identity-driven security, segmentation and authentication services across Roche's integral enterprise.




Your mission is to ensure that Roche's network remains resilient and compliant through the continuous evolution of our "Defense in Depth" strategy.
Responsibilities
Product Ownership and Technical Leadership
Act as the
primary Subject Matter Expert (SME)
for Secure Access technologies, providing deep technical expertise in the evaluation and selection of emerging security tools.
Drive the long-term technical roadmap for network access, ensuring all initiatives are strictly aligned with
Roche's Zero Trust
security architecture and strategy.
Partner with business units to
translate high-level security requirements
into actionable, scalable technical initiatives and functional policies.
Provide
mentorship and technical leadership
to junior engineers, fostering a culture of continuous learning and operational excellence within the team.
Identity-Based Access and Authentication
Design, deploy, and maintain
robust authentication solutions utilizing protocols such as *X, EAP-TLS, EAP-TEAP, RADIUS, TACACS+, SAML, and MFA.
Integrate disparate security platforms with enterprise Identity Providers (IdPs) to ensure a seamless and secure authentication flow across the environment.
Architect and manage
highly available authentication services to support Roche's global workforce and critical business operations.
Network Access Control (NAC) and Segmentation
Lead the
end-to-end lifecycle management
of Cisco ISE deployments,



including software upgrades, capacity planning, and platform optimization.
Develop and refine
endpoint profiling techniques
to accurately identify and secure corporate, medical, and IoT devices.
Implement advanced access control mechanisms
, including Dot1x, MAC Authentication Bypass (MAB), Guest Access, and posture-based authorization.
Design and oversee
the implementation of Cisco TrustSec and Scalable Group Tag (SGT)-based micro-segmentation to reduce the network attack surface.
Operational Excellence and Automation
Serve as a
senior point of escalation
for complex technical incidents, performing deep root-cause analysis to prevent recurrence.
Develop and maintain
comprehensive observability, monitoring, and reporting
dashboards to track platform health and security compliance.
Advocate for and implement
Infrastructure-as-Code (IaC) principles and security automation
to improve deployment speed and consistency.
Build and optimize
API-driven integrations and self-service capabilities
to empower other IT teams while maintaining security standards.
Global Operations
Ensure
secure and reliable connectivity
for tens of thousands of endpoints across diverse global regions.
Collaborate effectively
with globally distributed product squads and stakeholders to deliver integrated security solutions.
Qualifications
Education / Experience
Educational Background:
Bachelor's degree in
Computer Science
,
Software Engineering
,
Information Security
, or a related technical field.
Network Access Control Mastery:
5+ years of hands-on experience in designing, implementing, and managing enterpri

📌 Senior Cybersecurity Engineer For Secure Access Network (Madrid)
🏢 Roche
📍 Madrid