Senior Edge Defense Engineer: NGFW, ZTNA & Cloud Security

HiPEAC; Madrid; On-site; EUR 90,000 - 130,000; Full time

Job summary

Roche is seeking a Senior Cybersecurity Engineer (Edge Defense) to lead the edge security stack, including NGFWs, DDoS mitigation, and ZTNA. You will implement automation-first security services and secure access across multi-cloud environments while maintaining global availability.

You will architect robust, high-availability solutions, develop observability dashboards, and drive security policy as code. This role demands deep security expertise and leadership across global teams.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Information Security, or related field.
• 5+ years in enterprise firewall design and management (Palo Alto and/or Fortinet).
• Cloud security across two major providers (AWS, Azure, or GCP).
• Palo Alto NGFW features: TLS inspection, User-ID, WildFire, Threat Prevention, URL Filtering, GlobalProtect.
• Automation experience with Ansible, Terraform, or Python.
• Experience in large, global environments; regulated industries a plus.

Responsibilities

• Lead end-to-end deployment and maintenance of NGFW with high availability.
• Architect and implement ZTNA to replace legacy VPNs.
• Manage multi-cloud security controls across AWS, Azure, and GCP.
• Design DDoS protection and threat prevention policies.
• Oversee edge solutions lifecycle from design to rollout.
• Develop security dashboards and telemetry for real-time visibility.
• Automate security workflows and code-based policy management.
• Provide on-call support for global edge security services.

Skills

Edge security

ZTNA

Zero Trust

Automation

Security policies

Cloud security

Education

Bachelor's degree in Computer Science

Information Security

Tools

Palo Alto

Fortinet

AWS

Azure

GCP

Ansible

Terraform

Python

Job description

Roche is seeking a Senior Cybersecurity Engineer (Edge Defense) to lead the edge security stack, including NGFWs, DDoS mitigation, and ZTNA. You will implement automation-first security services and secure access across multi-cloud environments while maintaining global availability.

You will architect robust, high-availability solutions, develop observability dashboards, and drive security policy as code. This role demands deep security expertise and leadership across global teams.