Network Security Engineer - RDT Security Platforms at Roche SSC Americas in San Jose, Costa Rica focuses on The Position The Network Security team secures Roche’s global connectivity through policy-driven, automated infrastructure. In this role, you will architect, implement, and maintain secure network segmentation environments using Fortinet and Palo Alto firewalls.
The Position
The Network Security team secures Roche’s global connectivity through policy-driven, automated infrastructure. In this role, you will architect, implement, and maintain secure network segmentation environments using Fortinet and Palo Alto firewalls. You will build detailed implementation plans, manage firewall deployments, handle complex policies, VPNs, and routing, and execute system migrations. Additionally, you will troubleshoot advanced network issues, defend against emerging threats, and provide rotating on-call operational support.
The Opportunity:
- Design and develop robust network segmentation strategies, architectures, and detailed technical documentation using Fortinet and Palo Alto firewalls.
- Configure, deploy, and manage Fortinet FortiGate (including FortiManager/FortiAnalyzer) and Palo Alto Networks firewalls (including Panorama, App-ID, User-ID, WildFire, and URL Filtering).
- Implement firewall policies, NAT rules, IPSec/SSL VPNs, and L2/L3 routing (BGP, OSPF, VLANs, VXLAN) to enforce network segmentation.
- Perform migrations, upgrades, and advanced troubleshooting of network and security infrastructure.
- Collaborate with network architects and cross-functional product squads to integrate firewall controls into existing environments, including manufacturing sites.
- Stay current with emerging security threats and participate in a rotating on-call support schedule.
Who you are:
- Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field preferred.
- 3+ years of experience designing, deploying, and supporting Next-Generation Firewalls with a strong enterprise networking background.
- Extensive hands-on technical experience with Fortinet (Fortinet Security Fabric) and Palo Alto Networks platforms.
- Professional security certifications are highly desirable (e.g., Fortinet NSE 4–8, Palo Alto PCNSA/PCNSE, CCNP Security, or CISSP).
- Experience with scripting languages (Python, PowerShell), DevOps/Automation tools (Ansible, Terraform, Git, Jenkins), cloud platforms (AWS), or manufacturing/validated environments is a strong plus.
- Strong communication, facilitation, and conflict resolution skills with a proven ability to align complex stakeholder networks.
Relocation benefits are not available for this posting