Network Security Engineer: DDoS & NAC Expert

Sotec Consulting; Madrid; On-site; EUR 60,000 - 90,000; Full time

Job summary

Roche is seeking a Cybersecurity Engineer for Network Security to design and build secure access and monitoring capabilities across on-prem and cloud environments. You will lead NAC deployments (Cisco ISE), integrate with Palo Alto NGFW, and drive a custom observability framework with real-time dashboards.

The role emphasizes automation, policy-driven security, and cross‑functional collaboration with Cloud, Infra, and Incident Response teams to strengthen Roche's network security posture.

Qualifications

• Bachelor's degree in a related technical field.
• 3+ years designing and managing enterprise NAC, specifically Cisco ISE.
• Experience with Palo Alto NGFW, SSL decryption, and threat prevention.
• Automation experience using Ansible, Terraform, or Python.
• Experience with monitoring tools like Splunk or LogicMonitor.
• Ability to collaborate across global teams.

Responsibilities

• Design high-level and low-level architecture for global Cisco ISE deployments and WAC strategies.
• Serve as Palo Alto SME for NGFW architectures and threat prevention.
• Develop a custom observability framework with front-end and back-end components.
• Build automated data integrations and dashboards for real-time security visibility.
• Lead complex escalations and implement automated architectural fixes.

Skills

NAC design

Network security

Automation engineering

Threat prevention

Security policy

Education

Bachelor's degree in Computer Science / Software Engineering / Information Security

Tools

Cisco ISE

Palo Alto

Ansible

Terraform

Python

REST APIs

SNMP

Syslog

LogicMonitor

Splunk

Job description

Roche is seeking a Cybersecurity Engineer for Network Security to design and build secure access and monitoring capabilities across on-prem and cloud environments. You will lead NAC deployments (Cisco ISE), integrate with Palo Alto NGFW, and drive a custom observability framework with real-time dashboards.

The role emphasizes automation, policy-driven security, and cross‑functional collaboration with Cloud, Infra, and Incident Response teams to strengthen Roche's network security posture.