Roche
Healthcare
CybersecurityEngineerforSecureAccessNetwork(Temporary,FixedTerm)
Neural analysis suggests this role is
optimal for Mid candidates.
“Cybersecurity Engineer for Secure Access Network (Temporary, Fixed Term) at Roche. Skills: Network Access Control, Network segmentation, Cisco ISE, Palo Alto NGFW. Deploy Cisco ISE globally. Maintain Cisco ISE globally”
Industry & Context.
Root cause analysis; Troubleshooting
What They're Looking For.
Must Have
3+ years Cisco ISE, 3+ years enterprise NAC, 3+ years network segmentation, 3+ years endpoint profiling, 3+ years Dot1x/MAB workflows, 3+ years Cisco TrustSec, 3+ years Palo Alto NGFWs, 3+ years SSL decryption, 3+ years threat prevention, Deep understanding RADIUS, Deep understanding TACACS+, Deep understanding core routing/switching, Deep understanding Defense in Depth
Nice to Have
Ansible proficiency, Terraform proficiency, GitHub proficiency, IaC proficiency, CI/CD pipelines proficiency, Python scripting, PowerShell scripting, Bash scripting, API integrations proficiency, L2/L3 enterprise networking, BGP routing, OSPF routing, VLAN switching, VXLAN switching, Pharmaceutical industry experience, Healthcare industry experience, Finance industry experience
What You'll Do.
Deploy Cisco ISE globally
Maintain Cisco ISE globally
Design endpoint profiling logic
Design Dot1x/MAB workflows
Design Cisco TrustSec
Deploy Palo Alto NGFWs
Support Palo Alto NGFWs
Manage security policies as code
Eliminate manual friction
Implement automated network access policies
Serve as escalation lead
Provide root-cause analysis
Provide long-term architectural fixes
Build dashboards for visibility
Design self-service tools
How You'll Work.
Team & Collaboration
Cross-functional stakeholders; Internal teams
Process & Methodology
IaC, CI/CD pipelines
Full Job Description
At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. ## ### The Position The Network Security team secures Roche’s global connectivity through policy-driven, automated infrastructure. We design, build, and maintain enterprise solutions—including Internet Security, DDoS protection, VPNs, NAC, and Deep Packet Inspection—to mitigate risks across cloud and on-prem environments. ### _**This is a temporary, fixed-term position**_ **The Opportunity:** As a **Cybersecurity Engineer for Secure Access Network,** you will play a pivotal role in the end-to-end lifecycle, global adoption, and engineering of our Network Access Control (NAC) and network segmentation systems. You will bridge the gap between high-level security policy and technical execution, leveraging automation to scale controls and advance our Zero Trust roadmap. **Key Responsibilities:** * **NAC & Segmentation Engineering:** Deploy and maintain Cisco ISE globally. Design endpoint profiling logic (IoT, Medical, Corporate), Dot1x/MAB workflows, and Cisco TrustSec (SGTs) for software-defined segmentation. * **Perimeter Security:** Deploy and support Palo Alto Next-Generation Firewalls (NGFW) in high-availability (Active/Active and Active/Passive) configurations. * **Automation & Compliance:** Manage security policies as code using automation workflows to eliminate manual friction. Implement automated network access policies based on device compliance. * **Operations & Visibility:** Serve as the escalation lead for complex network security incidents, providing root-cause analysis and long-term architectural fixes.
Applying for this Cybersecurity Engineer for Secure Access Network (Temporary, Fixed Term) role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Workday
- Workday has a multi-step form — save your progress after every section.
- "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
- Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
- Job requisition numbers are useful when following up with HR by email.
ANONYMOUS · UNFILTERED
What do employees actually say about Roche?
Real rants from real employees. Read before you apply.