{"id":34802,"url":"https://alion.io/job/roche-cybersecurity-engineer-for-secure-access-network-temporary-fixed-term","title":"Cybersecurity Engineer for Secure Access Network (Temporary, Fixed Term)","company":{"id":13531,"name":"Roche","domain":"roche.com","url":"https://alion.io/company/roche","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":224,"ghost_share":0.022,"stale_share":0.589,"repost_share":0.085,"time_to_fill_p50_days":14,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland","Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":49000,"max_usd":86000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":16},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"FortiGate","optional":false},{"name":"Git","optional":false},{"name":"GitLab","optional":false},{"name":"Jenkins","optional":false},{"name":"Perl","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-07-30T00:00:00Z","employer_posted_date":"2026-07-30","last_verified_at":"2026-10-16T21:10:14Z","board_verified":true,"closed_at":null,"days_open":78,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":78},"description":"At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.\nThe Position\nCybersecurity Engineer for Secure Access Network (Temporary, Fixed Term)\nDescription of the area\nThe Network Security team secures Roche’s global connectivity through policy-driven, automated infrastructure. We are seeking a Network Security Engineer to design, implement, and maintain secure network segmentation environments using Fortinet and Palo Alto firewalls. In this role, you will architect robust firewall solutions, build detailed implementation plans, and seamlessly integrate security controls into existing infrastructure. You will manage firewall deployments, handle complex policies, VPNs, and routing, while executing system migrations and platform upgrades. Additionally, you will troubleshoot advanced network issues, defend against emerging threats, and provide rotating on-call operational support.\nThis is a temporary, fixed-term position from 1 to 2 years\nThe Opportunity\nDesign and develop robust network segmentation strategies and architectures leveraging Fortinet and Palo Alto firewalls to meet business and security requirements.\n\nCreate detailed network diagrams, design documents, and implementation plans for new segmentation environments.\n\nCollaborate with network architects to integrate firewall solutions seamlessly into the existing network infrastructure.\n\nConfigure, deploy, and manage Fortinet FortiGate and Palo Alto Networks firewalls (including Panorama for Palo Alto, FortiManager for Fortinet).\n\nImplement firewall policies, NAT rules, VPNs (IPSec/SSL), routing, and other security features to enforce segmentation.\n\nPerform migrations and upgrades of existing firewall infrastructure\n\nTroubleshoot complex network and security issues related to firewall configurations and segmentation\n\nStay current with emerging threats, vulnerabilities, and security technologies.\n\nAvailable for on-call support on a rotating schedule.\n\nWho you are:\nEducation/Experience\nBachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field\n\n3+ years of experience in designing, deploying, and supporting Next-Generation Firewalls with a strong networking background.\n\nExtensive hands-on experience with Fortinet (FortiGate, FortiManager, FortiAnalyzer, etc.) and a deep understanding of Fortinet's Security Fabric.\n\nExtensive hands-on experience with Palo Alto Networks (PA-Series, VM-Series, Panorama, App-ID, User-ID, WildFire, Threat Prevention, URL Filtering).\n\nSolid understanding of Security concepts, trends and best practices with experience in validated environments.\n\nHands-on technical security skills, operational background, and experience with security technologies and underlying infrastructure.\n\nThe ideal candidate will bring previous experience in Manufacturing environments.\n\nSoft skills\nCustomer-oriented and service-focused.\n\nSelf-motivated and independent.\n\nStrong analytical skills.\n\nExcellent written and spoken English.\n\nCollaborative and proactive team player.\n\nAbility to work in a global team.\n\nAbility to perform well in high-stress situations.\n\nAdditional qualifications\nCertifications: Fortinet NSE 4, 5, 7, or 8 or Palo Alto Networks: PCNSA PCNSE\n\nOther relevant certifications: CCNP Security, CISSP\n\nFamiliarity with Cloud Platforms such as AWS\n\nProgramming and Ops Skills: Python, Perl, Ruby, Powershell.\n\nAgile and DevOps Toolsets: Jenkins, Ansible, Git, GitLab, Terraform\n\nAgile framework / methodologies.\n\nWhat you get:\nSalary range 14 175-26 325 PLN gross based on the employment contract.\n\nAnnual bonus payment based on your performance.\n\nDedicated training budget (training, certifications, conferences, diversified career paths etc.).\n\nRecharge Fridays (2 Fridays off per quarter available).\n\nTake time Program (up to 3 months of leave to use for any purpose).\n\nVacation subsidy available.\n\nFlex Location (possibility to perform our work from different places in the world for a certain period of time).\n\nTake Time for Charity (additional paid leave of maximum 2 weeks to engage in the charity action of your choice).\n\nPrivate healthcare (LuxMed packages), group life insurance (UNUM) and Multisport.\n\nStock share purchase additions.\n\nYearly sales of company laptops and cars and many more!\n\nApply directly and join us in shaping the future of healthcare.\nIf you feel this offer suits a friend of yours, feel free to share it.\nWant to know what it’s like to be a part of Roche IT first-hand? Check out our blog!\nhttps://careers.roche.com/global/en/we-are-roche\n…..\nAdministratorem Twoich danych osobowych jest spółka Roche Polska Sp. z o.o., ul. Domaniewska 28, 02-672 Warszawa. Dane przetwarzane są w celu prowadzenia rekrutacji. Przysługuje Ci prawo dostępu do treści swoich danych, ich sprostowania, usunięcia, ograniczenia przetwarzania, przenoszenia oraz - w sytuacji, gdy są one przetwarzane na podstawie udzielonej zgody - cofnięcia tejże zgody w dowolnym momencie. Kontakt do Inspektora Ochrony Danych: . Więcej informacji o zasadach przetwarzania przez Roche Twoich danych osobowych pod linkiem:\nhttps://www.roche.pl/pl/content/klauzula-informacyjna-rekrutacja-pl.html\nThe controller of your personal data is Roche Polska Sp. z o.o., ul. Domaniewska 28, 02-672 Warsaw. The data is processed for the purpose of recruitment. You have the right to access your data, rectify it, delete it, limit processing, transfer it and - if processing is based on your consent - withdraw this consent at any time. Contact the Data Protection Officer at: . More information on the principles of processing your personal data by Roche at the link:\nhttps://www.roche.pl/pl/content/klauzula-informacyjna-rekrutacja-en.html\nRoche Polska Sp. z o.o. działa w pełnej zgodności z przepisami prawa i nie toleruje żadnych naruszeń. W Roche Polska Sp. z o.o. obowiązuje Procedura zgłaszania naruszeń prawa. W przypadku chęci zgłoszenia nieprawidłowości związanych z naszą działalnością, wszelkie niezbędne informacje dotyczące zgłaszania naruszeń znajdują się na naszej stronie internetowej: https://www.roche.pl/kontakt/ochrona-sygnalistow-zglaszanie-naruszen.\nRoche Polska sp. z o.o. operates in full compliance with the law and does not tolerate any violations. Roche Polska sp. z o.o. has implemented a Procedure for Reporting Violations of Law. If you wish to report any irregularities related to our activities, all necessary information regarding the reporting process can be found on our website: https://www.roche.pl/kontakt/ochrona-sygnalistow-zglaszanie-naruszen.\nCompensation & Benefits\nThe expected salary range for this position, based on the primary location of Warsaw Grafit is 170,100.00 PLN - 315,900.00 PLN . Final compensation will be determined by a number of factors, including your skills, experience, qualifications, and location.This position also offers an attractive benefits package.\nLearn more about how we reward our employees at Roche.\nWho we are\nA healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.\nLet’s build a healthier future, together.\nRoche is an Equal Opportunity Employer.","description_format":"text","description_chars":7995,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Biologics & Biosimilars","Oncology Therapeutics"],"lifecycle":[{"event":"open","at":"2026-07-30T00:00:00Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.188,"p_room":0.28,"age_days":78,"expected_fill_days":14,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/roche-cybersecurity-engineer-for-secure-access-network-temporary-fixed-term","json_url":"https://alion.io/job/roche-cybersecurity-engineer-for-secure-access-network-temporary-fixed-term.json","meta":{"generated_at":"2026-10-16T22:14:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3745,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13531},"rest":"https://alion.io/mcp/rest/get_company?id=13531"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Froche-cybersecurity-engineer-for-secure-access-network-temporary-fixed-term"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Froche-cybersecurity-engineer-for-secure-access-network-temporary-fixed-term"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Froche-cybersecurity-engineer-for-secure-access-network-temporary-fixed-term"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/roche-cybersecurity-engineer-for-secure-access-network-temporary-fixed-term\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Froche-cybersecurity-engineer-for-secure-access-network-temporary-fixed-term"}]}