Remote Access Engineer – Citrix NetScaler, Zscaler Private Access

• Administer, configure, and continuously improve the Bank’s Citrix NetScaler ADC and NetScaler Gateway infrastructure
• Ensure high availability, performance, scalability, and operational resilience across primary and disaster recovery environments
• Manage and maintain SSL-VPN and clientless access services, including virtual server configurations, authentication policies, rewrite rules, responder policies, and traffic steering mechanisms
• Design, implement, and maintain secure authentication and conditional access policies based on identity, device type, network location, and contextual risk
• Participate in the design, implementation, and rollout of the Bank’s Zscaler Private Access (ZPA) platform
• Support the transition toward a Zero Trust Network Access architecture through technical design, testing, integration, and operational readiness activities
• Develop and maintain expertise across Citrix NetScaler Gateway and ZPA technologies
• Support the Bank’s strategic remote access roadmap and secure connectivity across multiple access platforms
• Plan, coordinate, and execute infrastructure upgrades, security patches, policy changes, and platform enhancements under change management processes
• Provide 2nd and 3rd level engineering support and act as an escalation point for complex incidents
• Participate in a shared 24/7 on-call rotation for critical services

• University degree or higher technical education (university of applied sciences, federal diploma) in Computer Science, Information Security, or a related discipline — or equivalent practical experience
• Minimum 3–5 years of hands-on experience in IT Security or Infrastructure Engineering, focused on secure remote access, identity management, authentication technologies, and endpoint security
• In-depth expertise in Citrix NetScaler ADC and NetScaler Gateway, including AAA policies, virtual server configuration, SSL-VPN services, high-availability deployments, authentication flows, and GUI/CLI troubleshooting
• Knowledge of Zero Trust Network Access (ZTNA) concepts and architectures
• Experience with Zscaler Private Access (ZPA) or comparable ZTNA technologies is considered an advantage
• Practical scripting and automation skills using PowerShell, Python, or Bash
• Experience with REST APIs, Citrix Nitro API, or comparable interfaces
• Practical experience with Microsoft Entra ID (Azure AD), Active Directory, and hybrid identity environments
• Experience integrating remote access platforms with Multi-Factor Authentication (MFA) solutions and modern identity providers
• Understanding of endpoint compliance validation, device trust concepts, BYOD access models, and modern remote access security architectures
• Experience in financial services or other highly regulated industries, including regulatory and compliance requirements
• Experience supporting and operating business-critical infrastructure platforms with focus on availability, resilience, performance, and security
• Fluent written and spoken English (B2/C1)
• Strong analytical, conceptual, communication, collaboration, and problem-solving skills

• 100% (f/m/d) remote work arrangement
• Shared 24/7 on-call rotation for critical services
• Opportunity to contribute to broader security services and expand expertise across multiple security domains
• Global team collaboration
• Online application tool and job alert access