Senior Internal Network Defense Engineer — AI-Driven Segmentation

3M HEALTHCARE; Madrid; Presencial; COP 274.685.000 - 384.559.000; Jornada completa

Descripción de la vacante

Roche seeks a Senior Cybersecurity Engineer for Internal Network Defense to protect critical manufacturing, research, and corporate environments. You will architect East-West segmentation, enforce robust security boundaries, and lead high‑speed policy enforcement across on-prem and cloud assets.

We rely on a dual-vendor strategy (Palo Alto and Fortinet) and champion AI-driven risk detection to harden the internal network against emerging threats, with on-call readiness for 24/7 coverage in a

Formación

• 3+ years designing, deploying, and supporting NGFWs in large enterprises.
• Automation experience with Ansible, Terraform, or Python to manage security infra at scale.
• Experience in regulated environments (pharma, healthcare, or finance) is highly preferred.

Responsabilidades

• Design and document robust network segmentation using Fortinet and Palo Alto firewalls.
• Explore and integrate AI to analyze internal traffic and identify risks in complex environments.
• Define boundaries for automated workflows and ensure policy changes stay within safe parameters.
• Create detailed network diagrams and implementation plans for segmentation environments (Labs, Manufacturing, Research).
• Configure, deploy, and manage PA-series, VM-series, FortiGate firewalls; use Panorama and FortiManager to enforce policies and VPNs.
• Lead migration and upgrades of internal firewall infrastructure with zero-downtime.
• Serve as SME for escalations, perform deep-packet analysis and root-cause investigations.

Conocimientos

Palo Alto

Fortinet

Security basics

Networking

Educación

Bachelor's degree in CS/Engineering

Herramientas

Ansible

Terraform

Python

Palo Alto Panorama

FortiGate FortiManager FortiAnalyzer

Descripción del empleo

Roche seeks a Senior Cybersecurity Engineer for Internal Network Defense to protect critical manufacturing, research, and corporate environments. You will architect East-West segmentation, enforce robust security boundaries, and lead high‑speed policy enforcement across on-prem and cloud assets.

We rely on a dual-vendor strategy (Palo Alto and Fortinet) and champion AI-driven risk detection to harden the internal network against emerging threats, with on-call readiness for 24/7 coverage in a