Cybersecurity Engineer for Secure Access Network (Temporary, Fixed Term)

F. Hoffmann-La Roche AG; Warszawa; On-site; PLN 14,000 - 26,000; Full time

Benefits offered by this job

Salary range given

Annual bonus

Training budget

Fridays off

Leave programs

Healthcare

Stock options

Job summary

Roche is seeking a Cybersecurity Engineer to design, implement, and maintain secure network segmentation using Fortinet and Palo Alto firewalls. You will develop robust firewall solutions, write detailed implementation plans, and integrate security controls into the existing infrastructure.

The role involves managing deployments, policies, VPNs, and routing, plus migrations and upgrades. On-call support is required on a rotating schedule for a 1–2 year fixed-term assignment.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field.
• 3+ years designing, deploying, and supporting Next-Generation Firewalls with strong networking.
• Hands-on Fortinet FortiGate/FortiManager/FortiAnalyzer expertise.
• Hands-on Palo Alto Networks PA-Series/VM-Series/Panorama expertise.
• Knowledge of security concepts, trends and best practices in validated environments.
• Experience in manufacturing environments preferred.
• Strong English written and spoken communication.

Responsibilities

• Design and develop robust network segmentation strategies using Fortinet and Palo Alto firewalls.
• Create detailed network diagrams, design documents, and implementation plans.
• Collaborate with network architects to integrate firewall solutions into existing infrastructure.
• Configure, deploy, and manage FortiGate and Palo Alto firewalls (Panorama, FortiManager).
• Implement firewall policies, NAT, VPNs (IPSec/SSL), routing, and security features.
• Migrate and upgrade existing firewall infrastructure.
• Troubleshoot complex network and security issues related to firewalls and segmentation.
• Stay updated on threats and security technologies.
• Available for rotating on-call support.

Skills

Fortinet FortiGate

FortiManager

Palo Alto Panorama

Palo Alto VM-Series

VPNs

Routing

Network security

English communication

On-call support

Cloud platforms (AWS)

Education

Bachelor's degree in Computer Science/Info Security

Tools

Fortinet NSE 4/5/7/8

Palo Alto PCNSA/PCNSE

Job description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

Position

Cybersecurity Engineer for Secure Access Network (Temporary, Fixed Term)

The Network Security team secures Roche’s global connectivity through policy-driven, automated infrastructure. We are seeking a Network Security Engineer to design, implement, and maintain secure network segmentation environments using Fortinet and Palo Alto firewalls. In this role, you will architect robust firewall solutions, build detailed implementation plans, and seamlessly integrate security controls into existing infrastructure. You will manage firewall deployments, handle complex policies, VPNs, and routing, while executing system migrations and platform upgrades. Additionally, you will troubleshoot advanced network issues, defend against emerging threats, and provide rotating on-call operational support. This is a temporary, fixed-term position from 1 to 2 years.

Opportunity

• Design and develop robust network segmentation strategies and architectures leveraging Fortinet and Palo Alto firewalls to meet business and security requirements.
• Create detailed network diagrams, design documents, and implementation plans for new segmentation environments.
• Collaborate with network architects to integrate firewall solutions seamlessly into the existing network infrastructure.
• Configure, deploy, and manage Fortinet FortiGate and Palo Alto Networks firewalls (including Panorama for Palo Alto, FortiManager for Fortinet).
• Implement firewall policies, NAT rules, VPNs (IPSec/SSL), routing, and other security features to enforce segmentation.
• Perform migrations and upgrades of existing firewall infrastructure.
• Troubleshoot complex network and security issues related to firewall configurations and segmentation.
• Stay current with emerging threats, vulnerabilities, and security technologies.
• Available for on-call support on a rotating schedule.

Who you are

• Education/Experience: Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.
• 3+ years of experience in designing, deploying, and supporting Next-Generation Firewalls with a strong networking background.
• Extensive hands‑on experience with Fortinet (FortiGate, FortiManager, FortiAnalyzer, etc.) and a deep understanding of Fortinet's Security Fabric.
• Extensive hands‑on experience with Palo Alto Networks (PA-Series, VM-Series, Panorama, App-ID, User-ID, WildFire, Threat Prevention, URL Filtering).
• Solid understanding of Security concepts, trends and best practices with experience in validated environments.
• Hands‑on technical security skills, operational background, and experience with security technologies and underlying infrastructure.
• The ideal candidate will bring previous experience in Manufacturing environments.
• Soft skills: Customer‑oriented and service‑focused, self‑motivated and independent, strong analytical skills, excellent written and spoken English, collaborative and proactive team player, ability to work in a global team, ability to perform well in high‑stress situations.

Additional qualifications

• Certifications: Fortinet NSE 4, 5, 7, or 8 or Palo Alto Networks: PCNSA, PCNSE.
• Other relevant certifications: CCNP Security, CISSP.
• Familiarity with Cloud Platforms such as AWS.
• Programming and Ops Skills: Python, Perl, Ruby, Powershell.
• Agile and DevOps Toolsets: Jenkins, Ansible, Git, GitLab, Terraform.
• Agile framework / methodologies.

What you get

• Salary range 14 175-26 325 PLN gross based on the employment contract.
• Annual bonus payment based on your performance.
• Dedicated training budget (training, certifications, conferences, diversified career paths etc.).
• Recharge Fridays (2 Fridays off per quarter available).
• Take time Program (up to 3 months of leave to use for any purpose).
• Vacation subsidy available.
• Flex Location (possibility to perform our work from different places in the world for a certain period of time).
• Take Time for Charity (additional paid leave of maximum 2 weeks to engage in the charity action of your choice).
• Private healthcare (LuxMed packages), group life insurance (UNUM) and Multisport.
• Stock share purchase additions.
• Yearly sales of company laptops and cars and many more!

Compensation & Benefits

• The expected salary range for this position, based on the primary location of Warsaw: 170 100.00 PLN - 315 900.00 PLN.
• Final compensation will be determined by a number of factors, including your skills, experience, qualifications, and location.
• This position also offers an attractive benefits package.

Who we are

A healthier future drives us to innovate. Together, more than 100,000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life‑changing healthcare solutions that make a global impact. Let’s build a healthier future, together. Roche is an Equal Opportunity Employer. We believe it’s urgent to deliver medical solutions right now – even as we develop innovations for the future. We are passionate about transforming patients’ lives. We are courageous in both decision and action. And we believe that good business means a better world. That is why we come to work each day. We commit ourselves to scientific rigor, unassailable ethics, and access to medical innovations for all. We do this today to build a better tomorrow. We are proud of who we are, what we do, and how we do it. We are many, working as one across functions, across companies, and across the world. We are Roche.

Roche is an Equal Opportunity Employer. We are committed to fostering a diverse and inclusive environment. We welcome applications from all backgrounds, including but not limited to gender, race, ethnicity, religion, sexual orientation, disability, veteran status, age, or any other protected characteristic.