Remote Access Engineer – Citrix NetScaler & ZPA

About the role

We are seeking an experienced Remote Access Engineer to join our global security engineering team. You will operate and enhance the Bank’s Citrix NetScaler infrastructure, enforce secure access policies, and drive the evolution towards a Zero Trust Network Access architecture using Zscaler Private Access.

Key responsibilities

• Administer, configure and continuously improve Citrix NetScaler ADC and NetScaler Gateway infrastructure, ensuring high availability and performance across primary and disaster‑recovery environments.
• Manage SSL‑VPN and clientless access services, including virtual server configurations, authentication policies, rewrite rules and traffic steering.
• Design and maintain secure authentication and conditional‑access policies based on user identity, device type, network location and risk factors.
• Participate in design, implementation and rollout of Zscaler Private Access (ZPA) to support a Zero Trust Network Access architecture.
• Plan, coordinate and execute infrastructure upgrades, security patches and policy changes following regulated change‑management processes.
• Provide 2nd and 3rd level engineering support and act as escalation point for complex incidents, including 24/7 on‑call rotation.

Required profile

• University degree or equivalent practical experience in Computer Science, Information Security or related field.
• 3–5 years of hands‑on experience in IT security or infrastructure engineering with a focus on secure remote access and identity management.
• Strong analytical, conceptual thinking and attention to detail in highly regulated environments.
• Willingness to learn new technologies and expand expertise across multiple security domains.
• Fluent written and spoken English (B2/C1).

Required skills

• Citrix NetScaler ADC and NetScaler Gateway (AAA policies, SSL‑VPN, HA deployments).
• Zscaler Private Access (ZPA) or comparable Zero Trust Network Access technology.
• PowerShell, Python or Bash scripting for automation.
• REST APIs, Citrix Nitro API integration.
• Microsoft Entra ID (Azure AD) and Active Directory.
• Multi‑Factor Authentication (MFA) integration.