Remote Access Engineer (Citrix NetScaler & Zscaler Private Access)

About the role

Julius Baer is looking for an experienced Remote Access Engineer to join its global security engineering team. The role covers the administration and improvement of the bank's Citrix NetScaler Gateway infrastructure, multi-factor authentication and conditional access policies, and contributes to the design and rollout of the Zscaler Private Access (ZPA) platform, moving towards a Zero Trust Network Access architecture. It is a 100% remote position.

Key responsibilities

• Administer, configure and improve the Citrix NetScaler ADC and NetScaler Gateway infrastructure, including primary and disaster recovery environments
• Manage SSL-VPN and clientless access services, including virtual servers, authentication policies, rewrite rules, responder policies and traffic steering
• Design and maintain authentication and conditional access policies based on identity, device, location and risk
• Take part in designing, implementing and rolling out Zscaler Private Access, including testing, integration and operational readiness
• Plan and run infrastructure upgrades, security patches and policy changes under change management
• Provide 2nd and 3rd level support and take part in a shared 24/7 on-call rotation
• Contribute to other security services such as Internet Proxy, MFA, PAM, PKI and Secure Mail Gateway

Required profile

• University degree or equivalent technical education in Computer Science, Information Security or a related field
• 3-5 years of hands-on experience in IT Security or Infrastructure Engineering, focused on remote access, identity management, authentication and endpoint security
• Experience in financial services or other highly regulated industries
• Fluent written and spoken English (B2/C1)

Required skills

• Citrix NetScaler ADC and NetScaler Gateway, including AAA policies, SSL-VPN, HA deployments and troubleshooting via GUI and CLI
• Knowledge of Zero Trust Network Access; Zscaler Private Access or similar is an advantage
• PowerShell, Python or Bash scripting and automation (e.g. certificate validation, health checks, REST APIs, Citrix Nitro API)
• Microsoft Entra ID (Azure AD), Active Directory and hybrid identity
• Integration of remote access with MFA and experience with endpoint compliance and BYOD models