Remote Access Engineer (Citrix NetScaler & Zscaler Private Access)

About the role

Julius Baer is looking for an experienced Remote Access Engineer to join its global security engineering team in Zurich. The role covers the administration and improvement of the bank's Citrix NetScaler Gateway infrastructure, multi-factor authentication and conditional access, and contributes to the design and rollout of the Zscaler Private Access (ZPA) platform, moving towards a Zero Trust Network Access (ZTNA) architecture. It sits alongside IAM, Endpoint Management, Security Operations and Global IT teams.

Key responsibilities

• Administer, configure and improve the Citrix NetScaler ADC and NetScaler Gateway infrastructure, including primary and disaster recovery environments
• Manage SSL-VPN and clientless access services, including virtual servers, authentication policies, rewrite rules, responder policies and traffic steering
• Design and maintain authentication and conditional access policies based on identity, device, location and risk
• Take part in designing, implementing and testing the Zscaler Private Access platform and the move to ZTNA
• Plan and run infrastructure upgrades, patches and policy changes under change management
• Provide 2nd and 3rd level support and take part in a shared 24/7 on-call rotation
• Gain hands-on experience with Internet Proxy, MFA, PAM, PKI and Secure Mail Gateway

Required profile

• University degree or equivalent technical education in Computer Science, Information Security or a related field
• 3-5 years of hands-on experience in IT Security or Infrastructure Engineering, focused on remote access, identity, authentication and endpoint security
• Experience in financial services or other highly regulated industries
• Fluent written and spoken English (B2/C1)

Required skills

• Citrix NetScaler ADC and NetScaler Gateway, including AAA policies, SSL-VPN, HA deployments and troubleshooting via GUI and CLI
• Knowledge of ZTNA and Zscaler Private Access (ZPA); experience with ZPA is an advantage
• PowerShell, Python or Bash scripting and automation via REST APIs, Citrix Nitro API or similar
• Microsoft Entra ID (Azure AD), Active Directory and hybrid identity
• Integration of remote access with MFA and identity providers, endpoint compliance and BYOD models