Remote Access Engineer (Citrix NetScaler & Zscaler Private Access)

About the role

Julius Baer is looking for an experienced Remote Access Engineer to join its global security engineering team. You will manage the bank’s Citrix NetScaler infrastructure and help drive the transition to a Zero Trust Network Access architecture using Zscaler Private Access.

Key responsibilities

• Administer, configure and continuously improve Citrix NetScaler ADC and NetScaler Gateway, ensuring high availability and performance across primary and DR environments.
• Manage SSL‑VPN and clientless access services, including virtual server configurations, authentication policies, rewrite rules and traffic steering.
• Design and implement secure authentication and conditional access policies based on identity, device type, location and risk.
• Participate in the rollout of Zscaler Private Access, supporting design, testing, integration and operational readiness.
• Plan and execute infrastructure upgrades, security patches and policy changes following change‑management processes.
• Provide 2nd and 3rd level support and take part in a 24/7 on‑call rotation for critical remote‑access services.

Required profile

• Highly proactive, solution‑oriented and able to independently resolve complex technical challenges.
• Strong analytical and conceptual thinking with attention to detail in regulated environments.
• Willingness to learn new technologies and expand expertise across multiple security domains.
• University degree or equivalent practical experience in Computer Science, Information Security or related field.
• 3–5 years of hands‑on experience in IT security or infrastructure engineering, focusing on remote access and identity management.

Required skills

• Citrix NetScaler ADC and NetScaler Gateway (AAA policies, virtual servers, SSL‑VPN, HA deployments).
• Zscaler Private Access or comparable ZTNA technologies.
• Scripting/automation with PowerShell, Python or Bash; REST APIs, Citrix Nitro API.
• Microsoft Entra ID (Azure AD), Active Directory and hybrid identity environments.
• Integration of remote‑access platforms with MFA solutions and modern identity providers.
• Understanding of endpoint compliance, device trust and BYOD access models.