Remote Access Engineer – Citrix NetScaler & Zscaler

About the role

Julius Baer is looking for an experienced Remote Access Engineer to join its global security engineering team in Zurich. You will be responsible for designing, operating and continuously improving secure remote access platforms, including Citrix NetScaler Gateway and Zscaler Private Access, within a highly regulated financial services environment.

Key responsibilities

• Administer, configure and continuously improve the Citrix NetScaler ADC and NetScaler Gateway infrastructure, ensuring high availability, performance, scalability and resilience across primary and disaster‑recovery environments.
• Manage SSL‑VPN and clientless access services, including virtual server configurations, authentication policies, rewrite rules, responder policies and traffic steering mechanisms.
• Design, implement and maintain secure authentication and conditional‑access policies based on user identity, device type, network location and contextual risk factors.
• Participate in the design, implementation and rollout of the Zscaler Private Access platform, supporting the transition to a Zero Trust Network Access architecture.
• Plan, coordinate and execute infrastructure upgrades, security patches, policy changes and platform enhancements following change‑management processes.
• Provide 2nd and 3rd level engineering support, act as an escalation point and take part in a 24/7 on‑call rotation for critical services.

Required profile

• Highly proactive and solution‑oriented, able to assess, prioritize and resolve complex technical challenges independently.
• Strong analytical and conceptual thinking with high attention to detail in regulated, business‑critical environments.
• University degree in Computer Science, Information Security or related field, or equivalent practical experience.
• Minimum 3–5 years hands‑on experience in IT security or infrastructure engineering with a focus on secure remote access and identity management.
• In‑depth expertise in Citrix NetScaler ADC and NetScaler Gateway, including AAA policies, virtual server configuration, SSL‑VPN services, high‑availability deployments and troubleshooting via GUI and CLI.
• Knowledge of Zero Trust Network Access concepts; experience with Zscaler Private Access or comparable ZTNA technologies is a plus.
• Practical scripting and automation skills using PowerShell, Python or Bash, including automation via REST APIs and Citrix Nitro API.
• Experience with Microsoft Entra ID (Azure AD), Active Directory and hybrid identity environments.
• Proven experience integrating remote access platforms with Multi‑Factor Authentication solutions and modern identity providers.
• Strong communication and collaboration skills across global teams; fluent written and spoken English (B2/C1).

Required skills

• Citrix NetScaler ADC
• Citrix NetScaler Gateway
• Zscaler Private Access (ZPA)
• Zero Trust Network Access (ZTNA)
• PowerShell
• Python
• Bash
• REST APIs
• Citrix Nitro API
• Microsoft Entra ID / Azure AD
• Active Directory
• Multi‑Factor Authentication (MFA)