Senior Network Security Engineer (Cloud) - RDT Information Security — Roche
- Location
- San Jose, Costa Rica
- Contract
- full-time
- Posted
- 33 days ago
Role overview
At Roche you can show up as yourself, embraced for the unique qualities you bring.
Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally.
This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come.
- At Roche you can show up as yourself, embraced for the unique qualities you bring.
- Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally.
- Your main responsibilities will include:
- Multi-Cloud Infrastructure Design: Design and develop robust cloud network infrastructure across AWS, GCP, and Azure, leveraging Palo Alto instances for deep traffic inspection.
Main responsibilities
- Your main responsibilities will include:
- Multi-Cloud Infrastructure Design: Design and develop robust cloud network infrastructure across AWS, GCP, and Azure, leveraging Palo Alto instances for deep traffic inspection.
- Advanced Palo Alto Engineering: Execute advanced configuration and management of Palo Alto solutions (VM-Series, Panorama), including complex upgrades and migrations in production.
- Cloud Programming & Automation: Leverage cloud vendor network infrastructures to configure and deploy security solutions via automated pipelines using Terraform and Python.
- Feature Enforcement: Implement and manage App-ID, User-ID, WildFire, Threat Prevention, SSL Decryption, and GlobalProtect to enforce a Zero Trust posture.
- Operational Excellence: Manage security policies as code and improve automation workflows and cross-platform orchestration to eliminate manual friction.
- Technical Subject Matter Expertise: Troubleshoot complex issues related to cloud-native routing, load balancing, and firewall inspection within multi-cloud environments. Who you are:
- You hold a Bachelor’s degree in Computer Science, Software Engineering, Information Security, or a related technical field.
- You have a proven track record of implementing network security controls in at least two major cloud providers (AWS, Azure, or GCP).
- You possess 3+ years of experience configuring and maintaining Palo Alto Next-Generation Firewalls (NGFW), including TLS inspection, WildFire, and GlobalProtect.
Additional details
- Join Roche, where every voice matters.
- Technical Subject Matter Expertise: Troubleshoot complex issues related to cloud-native routing, load balancing, and firewall inspection within multi-cloud environments.
- You have a deep understanding of core protocols (BGP, OSPF, DNS, TLS/SSL) and how they intersect with security enforcement.
- Relocation benefits are not available for this posting A healthier future drives us to innovate.
- We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact. Let’s build a healthier fut
Notes and original content
- The Position
- The Opportunity:
- Who you are:
- Relocation benefits are not available for this posting
- Who we are
- A healthier future drives us to innovate.
- We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.
- Let’s build a healthier fut
Questions about this listing
What salary does Roche offer for this role?
Roche lists CHF 85'500 - 129'500 gross per year for this position in San Jose, Costa Rica. This is the salary published in the original listing (or, when the employer omits a figure, a realistic estimate for the role and sector) — the calculator on this site converts it to your actual net take-home once cross-border tax and social contributions are applied.
Is this a full-time role, and what type of contract does Roche offer?
This listing is a full-time position. The contract type shown here comes directly from the employer's original posting; always confirm exact hours, notice period and probation length with Roche during the application process, since these details can vary by role even within the same contract category.
Do I need a cross-border work permit for a role in Basel?
EU/EFTA residents living in the border zone of the country adjoining Canton Basel can apply for a G permit; the Swiss employer files it with that canton's migration office after the contract is signed. Border-zone rules and processing times vary by neighbouring country and canton, so confirm the specifics with Basel's cantonal migration office or with HR during the application.
How do I apply for this position at Roche?
Use the "Apply now" button on this page — it links directly to Roche's original listing at roche.wd3.myworkdayjobs.com, so your application goes straight to the employer's own applicant-tracking system. Frontaliere Ticino does not collect or forward applications itself.
