Senior Cybersecurity Engineer for Secure Access Network
On-siteMadrid, Madrid, Spain
Job Summary
Senior Cybersecurity Engineer (Network Security) responsible for Secure Access technologies and NAC strategy at Roche. Lead as SME for Secure Access, drive the long-term roadmap aligned with Zero Trust, design and deploy robust authentication solutions (802.1X, EAP-TLS, EAP-TEAP, RADIUS, TACACS+, SAML, MFA), manage Cisco ISE deployments, implement micro-segmentation (TrustSec/SGT), and oversee end-to-end lifecycle of network security across global environments. Provide mentorship, build IaC-driven security automation, and develop observability dashboards to ensure resilient, compliant network access for tens of thousands of endpoints worldwide. Collaborate with distributed product squads and stakeholders to translate security requirements into scalable policies and secure network architecture.
Required Qualifications
- Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related technical field
- 5+ years of hands-on experience in designing, implementing, and managing enterprise-grade NAC solutions, specifically Cisco ISE
- Proven track record in deploying Palo Alto NGFWs (SSL decryption and threat prevention)
- Automation experience with Ansible/Terraform and Python to manage network security infrastructure at scale
- Experience managing security controls in large, global environments (IoT, Medical, Corporate)
- Experience in regulated industries (pharma, healthcare, finance) is a significant plus
- Strong understanding of RADIUS, TACACS+ and identity-based access control
- Knowledge of PKI/certificate lifecycle management
- Experience with TrustSec, Dot1x, MAB, Profiling, Guest Portals, REST APIs
- Knowledge of enterprise networking (L2/L3, BGP, OSPF, VLANs, VXLAN)
- Leadership and mentoring skills
- Strong communication and stakeholder management skills
- Self-starter with ability to drive security projects end-to-end
- Experience with security automation and APIs to enable self-service tools
- Experience deploying and troubleshooting Palo Alto Firewalls in HA environments
- Experience with Cisco TrustSec and SGT-based micro-segmentation
- Experience with IaC (Terraform) and GitHub to manage configurations
- Experience building CI/CD pipelines for security operations
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.