Senior IT Security Engineer

<p>At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections,  where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.</p><h3></h3><p></p><h3>The Position</h3><p><b><b>Impact Healthcare</b></b></p><p><span>At Roche, we foster a diversity of scientific approaches and embrace innovative ideas. Combining that with the seamless integration of our capabilities in Roche Pharma and Roche Diagnostics, we are uniquely positioned to achieve medical breakthroughs for patients and society.  With our global spread of research, diagnostics and pharma development, data analytics and genomic insight teams, we are all working to translate science and research into groundbreaking therapies and diagnostics.</span></p><p></p><p><b><b>Do you want to make a big difference in IT as an IT Security Engineer? Do you want a role with a global impact? </b></b></p><p></p><p>If so, join us!</p><p>We are looking for a talented IT Security Engineer to be based in Madrid, Warsaw or Poznan.</p><p></p><p><b><b>What You Will Do</b></b></p><p></p><p><span>As a Senior IT Security Engineer, you will be part of the Information Systems Security global team that designs, delivers and supports the solutions and components used to provide Security Services globally within Roche.   Our team consists of IT professionals distributed across the globe with expertise in Endpoint Protection, Network Security, Remote Access Management, Vulnerability and Compliance Scan, Security Log Management, etc.  We provide technical support and technological consulting on security.</span></p><p></p><p><b><b>Purpose </b></b></p><p><span>Information Systems Security Section </span>designs, delivers, and supports<span> the solutions and components used to provide Security Services in the corporate <span><span><span>environment. This</span></span></span> team offers technical support and technology consulting for security infrastructure components in both on-premise and cloud environments.</span></p><p></p><p><b><b>Key Deliverables and Job Expectations </b></b></p><p><b><span>Design: </span></b></p><ul><li><span>Design and develop robust network segmentation strategies and architectures leveraging Fortinet and Palo Alto firewalls to meet business and security requirements.</span></li><li><span>Create detailed network diagrams, design documents, and implementation plans for new segmentation environments.</span></li><li><span>Collaborate with network architects to integrate firewall solutions seamlessly into the existing network infrastructure.</span></li></ul><p><b><span>Implementation &amp; Deployment:</span></b></p><ul><li><span>Configure, deploy, and manage Fortinet FortiGate and Palo Alto Networks firewalls (including Panorama for Palo Alto, FortiManager for Fortinet).</span></li><li><span>Implement firewall policies, NAT rules, VPNs (IPSec/SSL), routing, and other security features to enforce segmentation.</span></li><li><span>Perform migrations and upgrades of existing firewall infrastructure</span></li></ul><p></p><p><b>Operations &amp; Mantenance</b></p><ul><li><span>Troubleshoot complex network and security issues related to firewall configurations and segmentation</span></li><li><span>Stay current with emerging threats, vulnerabilities, and security technologies.</span></li><li><span>Available for on-call support on a rotating schedule.</span></li></ul><p></p><p><b>Technical Skills and Experience Required</b></p><ul><li><p><span>Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field</span></p></li><li><p><span>5+ years of experience in designing, deploying, and supporting</span> Next-Generation Firewalls <span>with a </span>strong networking background.</p></li><li><p><span>Extensive hands-on experience with Fortinet (FortiGate, FortiManager, FortiAnalyzer, etc.) and a deep understanding of Fortinet's Security Fabric.</span></p></li><li><p><span>Extensive hands-on experience with Palo Alto Networks (PA-Series, VM-Series, Panorama, App-ID, User-ID, WildFire, Threat Prevention, URL Filtering).</span></p></li><li><p>Solid understanding of Security concepts<span>, </span>trends and best practices<span> with experience in validated environments.</span></p></li><li><p>Hands-on technical<span> security skills, operational background, and experience with security technologies and underlying <span><span><span>infrastructure. </span></span></span></span></p></li><li><p><span>The ideal candidate will bring previous experience in Manufacturing environments.</span></p></li></ul><p></p><p><b>Soft Skills Required</b></p><ul><li><p><span>Customer-oriented and service-focused.</span></p></li><li><p><spa