Principal Network Security Platform Product Manager

Plume; Madrid; On-site; EUR 70,000 - 110,000; Full time

Job summary

Roche seeks a Cybersecurity Engineer for Network Security to design, build, and maintain secure network infrastructure across on-prem and cloud environments. You will lead NAC implementations (ISE, WAC) and drive the security posture with Palo Alto technologies, while building a custom observability framework for real-time visibility into the network.

You will collaborate with cross-functional teams to implement automation, security policy as code, and scalable security solutions, delivering

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Information Security, or related field.
• 3+ years designing, implementing NAC solutions, especially Cisco ISE.
• Proven experience with Palo Alto NGFWs, SSL decryption, and threat prevention.
• Automation experience using Ansible, Terraform, or Python at scale.
• Experience in global, complex environments with diverse device profiles.

Responsibilities

• Secure Access (ISE, WAC, Palo Alto) and design/architecture for global deployments.
• Lead Palo Alto NGFW architectures for advanced threat prevention and secure traffic management.
• Improve NAC policies, SGT propagation, and firewall rule-sets.
• Build a reusable observability framework and integration with external data sources.
• Develop dashboards and automation to enable secure, policy-based network operations.

Skills

Cisco ISE

Palo Alto NGFW

Python scripting

Ansible

Terraform

REST APIs

Security observability

DevOps / CI/CD

Education

Bachelor's degree in Computer Science/Software Engineering/Information Security

Tools

Cisco ISE

Palo Alto

Splunk

LogicMonitor

Terraform

Ansible

Job description

Roche seeks a Cybersecurity Engineer for Network Security to design, build, and maintain secure network infrastructure across on-prem and cloud environments. You will lead NAC implementations (ISE, WAC) and drive the security posture with Palo Alto technologies, while building a custom observability framework for real-time visibility into the network.

You will collaborate with cross-functional teams to implement automation, security policy as code, and scalable security solutions, delivering