Internet Proxy and Remote Access Security Engineer (APAC 100%)

About the role

Julius Baer, a private banking group headquartered in Zurich with offices in over 25 countries, is looking for an IT Security Engineer to safeguard its digital landscape. The role covers the engineering and operations of the Internet proxy (Zscaler) and remote access (Citrix NetScaler and Zscaler) solutions, supporting thousands of users across global offices and remote locations.

Key responsibilities

• Design, implement and govern the secure web and remote access infrastructure, ensuring resilient, policy-compliant connectivity.
• Operate and maintain the Zscaler Internet Access (ZIA) platform.
• Administer and support Citrix NetScaler (Citrix ADC) as the gateway for corporate SSL-VPNs and secure BYOD access.
• Support adoption of Zscaler Private Access (ZPA).
• Resolve complex incidents as a Tier 2/Tier 3 escalation point, with root cause analysis, corrective actions and preventative controls.
• Ensure compliance with information security policies, regulatory frameworks and audit requirements, controlling access entitlements and cryptographic material.
• Maintain technical documentation in Confluence and drive continuous service improvement, reliability, security, performance, observability and automation.
• Recommend upgrades and new controls based on emerging threats in web security, encrypted traffic analysis and identity-centric access.
• Work with IT Service Owners, IT Infrastructure, IT Application Managers, IT Architecture and Project Managers, and CRO and legal/compliance functions, and act ethically and compliantly.

Required profile

• 2-3 years in 2nd or 3rd line engineering or operations roles supporting enterprise IT security, ideally in a complex, highly regulated environment such as financial services.
• Bachelor's or Master's degree in Computer Science, Information Security or a related field, or equivalent practical experience.
• Team player with excellent communication skills, proactive and able to make independent decisions on incidents and change requests.
• Ability to work in a globally distributed team.

Required skills

• Hands-on experience with Zscaler Internet Access (ZIA) and Private Access (ZPA)
• Citrix NetScaler (Citrix ADC) for SSL-VPN and BYOD access
• Secure web gateways, proxy architectures, zero trust and remote access security
• Network security basics: firewalls, load balancing, WAF, TLS/SSL, DNS, IP routing in DMZ and extranet zones
• Advantageous: PKI, PAM, Vault, MFA; CISSP, CISM or CEH; Zscaler ACE certification