Remote Access Engineer (Citrix NetScaler & Zscaler Private Access)

About the role

Julius Baer is seeking an experienced Remote Access Engineer to join its global security engineering team. You will manage and evolve the bank’s Citrix NetScaler infrastructure and drive the transition to a Zero Trust Network Access architecture using Zscaler Private Access.

Key responsibilities

• Administer, configure and continuously improve Citrix NetScaler ADC and NetScaler Gateway, ensuring high availability, performance and resilience across primary and DR environments.
• Manage SSL‑VPN and clientless access services, including virtual server configurations, authentication policies, rewrite rules and traffic steering.
• Design, implement and maintain secure authentication and conditional access policies based on identity, device, location and risk.
• Participate in the rollout of Zscaler Private Access, supporting design, testing, integration and operational readiness.
• Plan and execute infrastructure upgrades, security patches and policy changes following change‑management processes.
• Provide 2nd and 3rd level support and participate in a 24/7 on‑call rotation for critical remote‑access services.

Required profile

• 3–5 years of hands‑on experience in IT security or infrastructure engineering with a focus on remote access and identity management.
• Strong analytical skills, proactive attitude and ability to work independently in a regulated financial environment.
• University degree or equivalent practical experience in Computer Science, Information Security or related field.
• Fluent written and spoken English (B2/C1).

Required skills

• Citrix NetScaler ADC and NetScaler Gateway (AAA policies, virtual servers, SSL‑VPN, HA deployments).
• Zscaler Private Access or comparable ZTNA technology.
• Scripting/automation with PowerShell, Python or Bash; experience with REST APIs, Citrix Nitro API.
• Microsoft Entra ID (Azure AD), Active Directory and hybrid identity environments.
• Integration of remote‑access platforms with MFA solutions and modern identity providers.