Hybrid IT Security Engineer

at Roche

• Job title: IT Security Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Ansible, AWS, Cloud, Cyber Security, Firewalls, Jenkins, Perl, Python, Ruby, Terraform
• Location requirements: Hybrid, Madrid, Spain

About the role

• IT Security Engineer at Roche designing and implementing network segmentation strategies using Fortinet and Palo Alto firewalls. Collaborating with network architects and troubleshooting complex security issues.

Responsibilities

• Design and develop robust network segmentation strategies and architectures leveraging Fortinet and Palo Alto firewalls to meet business and security requirements.
• Create detailed network diagrams, design documents, and implementation plans for new segmentation environments.
• Collaborate with network architects to integrate firewall solutions seamlessly into the existing network infrastructure
• Configure, deploy, and manage Fortinet FortiGate and Palo Alto Networks firewalls (including Panorama for Palo Alto, FortiManager for Fortinet).
• Implement firewall policies, NAT rules, VPNs (IPSec/SSL), authentication, routing, and other security features to enforce segmentation.
• Perform migrations and upgrades of existing firewall infrastructure
• Troubleshoot complex network and security issues related to firewall configurations and segmentation
• Stay current with emerging threats, vulnerabilities, and security technologies.
• Available for on-call support on a rotating schedule.

Requirements

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field
• 5+ years of experience in designing, deploying, and supporting Next-Generation Firewalls with a strong networking background.
• Extensive hands-on experience with Fortinet (FortiGate, FortiManager, FortiAnalyzer, etc.) and a deep understanding of Fortinet's Security Fabric.
• Extensive hands-on experience with Palo Alto Networks (PA-Series, VM-Series, Panorama, App-ID, User-ID, WildFire, Threat Prevention, Decryption, URL Filtering, GlobalProtect)
• Solid understanding of Security concepts, trends and best practices with experience in validated environments.
• Hands-on technical security skills, operational background, and experience with security technologies and underlying infrastructure.
• Certifications: Fortinet NSE 4, 5, 7, or 8 or Palo Alto Networks: PCNSA PCNSE
• Other relevant certifications: CCNP Security, CISSP
• Familiarity with Cloud Platforms such as AWS
• Programming and Ops Skills: Python, Perl, Ruby, Powershell.
• Agile and DevOps Toolsets: Jenkins, Ansible, Git, GitLab, Terraform
• Agile framework/methodologies.

Benefits

• health insurance
• retirement plans
• paid time off