Senior Security Engineer (Seamless Access) - RDT Security Platforms

F. Hoffmann-La Roche AG; Madrid; On-site; EUR 85,000 - 125,000; Full time

Benefits offered by this job

Acesso a tecnologia de ponta

Ambiente de trabalho colaborativo

Job summary

A Roche está contratando um Engenheiro de Segurança Sênior para a equipe de Acesso Seguro (Secure Access). Você projetará, implementará e operará soluções que asseguram o acesso remoto, a proteção de rede e a conformidade regulatória, atuando de forma prática e autônoma em um ambiente ágil.

São valorizados conhecimento em Cloudflare, VPN GlobalProtect, automação, infraestrutura como código (Terraform) e gestão de mudanças via ServiceNow, com foco em entregar controles de acesso robustos e

Qualifications

• 3–7 anos de experiência prática em engenharia de security com foco em rede e acesso seguro.

Responsibilities

• Projetar, implementar e operar tecnologias de acesso seguro e proteção de rede.
• Atuar como contribuidor prático para melhorias independentes.
• Colaborar com equipes de rede, identidade e nuvem para entregas integradas.
• Mentorar membros mais juniores da equipe e promover melhores práticas de segurança.

Skills

Network security

Zero Trust

WAF

Terraform

GitHub

ServiceNow

Automation

Inglês

Tools

Terraform

GitHub

Cloudflare

GlobalProtect

ServiceNow

Job description

## Senior Security Engineer (Seamless Access) - RDT Security PlatformsCandidatar-selocations: Madridtime type: Tempo integralposted on: Publicado hojetime left to apply: Data de término: 29 de julho de 2026 (13 dias restantes para se candidatar)job requisition id: 202604-110452Na Roche, você pode-se apresentar como você mesmo, abraçado pelas qualidades únicas que traz. Nossa cultura incentiva a expressão pessoal, o diálogo aberto e as conexões genuínas, onde você é valorizado e respeitado por quem você é, e permitindo que você prospere tanto pessoal como profissionalmente. É assim que pretendemos prevenir, deter e curar doenças e garantir que todos tenham acesso aos cuidados de saúde hoje e nas gerações futuras. Junte-se à Roche, onde cada voz é importante.### A posição**Senior Security Engineer******Impact****Our Secure Access team protects the organization’s global workforce by delivering and operating the technologies that enable secure, reliable, and compliant access to corporate resources. We work at the intersection of network security, identity, and cloud — supporting users and business-critical systems in a regulated industry environment.Do you want to make a meaningful impact as a Security Engineer focused on secure access and network security? Do you thrive in a fast-paced, self-directed environment? If so, we’d love to hear from you!****What You Will Do****As a Security Engineer on the Secure Access team, you will design, implement, and operate the technologies that underpin our organization’s remote access, web security, and network protection capabilities. You will be a hands-on contributor who brings both deep technical expertise and the energy to drive improvements independently.****Purpose****The Secure Access team engineers, delivers, and supports the solutions used to provide secure network access across the corporate environment — spanning on-premises, cloud, and hybrid infrastructure. The team provides hands-on engineering, configuration management, and automation support to keep access controls robust, auditable, and scalable in a regulated industry context.****Key Activities and Deliverables***** Design, implement, and operate Cloudflare-based web security and Zero Trust access solutions.* Administer and support GlobalProtect VPN infrastructure, including policy management, troubleshooting, and lifecycle operations.* Build and maintain automation pipelines to reduce manual toil and improve consistency across security configurations.* Manage infrastructure-as-code using Terraform and maintain version-controlled configurations in GitHub.* Own configuration management processes in ServiceNow, ensuring accurate CMDB records and change management compliance.* Ensure security solutions meet regulatory requirements and support audit and compliance activities.* Proactively identify gaps in access controls and propose improvements with a self-driven, solution-oriented mindset.* Collaborate with cross-functional partners including network, identity, and cloud teams to deliver integrated secure access capabilities.* Mentors more junior team members and contributes to the development of security best practices****Job Skills Required***** High energy, self-motivated, and capable of owning work end-to-end with minimal direction.* Accountability/Problem Solving: Independently leads the analysis of moderately complex cybersecurity incidents and technical problems, clearly defining the security problem scope and driving root cause analysis for security breaches or vulnerabilities* Identifies a diverse range of security stakeholders across functional areas and effectively manages relationships to build reliance through deep business and technical understanding, acting as a trusted advisor* Strong customer focus with a highly responsive service delivery and support ethic.* Collaborative and communicative — comfortable working across distributed, cross-functional teams.* Detail-oriented with a commitment to quality, documentation, and operational excellence.* Strong written and verbal English communication skills.**Qualifications and Experience Required*** 3-7 years of hands-on technical experience in security engineering, with a focus on network security and secure access technologies.* Demonstrated hands-on experience with WAF (any vendor, Cloudflare would be a Plus).* Proficiency with Terraform (or any other tool) for infrastructure-as-code and GitHub for version control and collaboration.* Experience using ServiceNow for configuration management (CMDB), change management, and/or incident management.* Proven experience building automation to support security operations (scripts, workflows, or CI/CD pipelines).* Prior experience working in a regulated industry (e.g., healthcare, finance, pharma, or government) with an understanding of compliance and audit requirements is a Plus.* Strong understanding of network security concepts including Zero Trust, VPN, DNS, firewalls, and web proxies.**Nice to Have*** Scripting or programming skills: Python, PowerShell, Bash, or similar.* Familiarity with Agile and DevOps practices; experience with CI/CD tooling (e.g., GitHub Actions, Jenkins, Ansible).* Experience with AWS, Azure, or GCP cloud security services.* Exposure to SIEM, EDR, or broader security operations tooling.* Relevant certifications such as PCNSE, Cloudflare Certified, CCNP Security, or equivalent.### Quem nós somosUm futuro mais saudável nos leva a inovar. Juntos, mais de 100 mil funcionários em todo o mundo se dedicam ao avanço da ciência, garantindo que todos tenham acesso à saúde hoje e nas próximas gerações. Nossos esforços resultam em mais de 26 milhões de pessoas tratadas com nossos medicamentos e mais de 30 bilhões de testes realizados usando nossos produtos de diagnóstico. Nós nos capacitamos para explorar novas possibilidades, promover a criatividade e manter as nossas ambições altas, para fornecer soluções de saúde que mudem a vida e causem um impacto global.Vamos construir juntos um futuro mais saudável.