Access Engineer, Citrix NetScaler, Zscaler Private Access

Role Overview

• Administer, configure, and continuously improve the Bank’s Citrix NetScaler ADC and NetScaler Gateway infrastructure
• Manage and maintain SSL-VPN and clientless access services, including virtual server configurations, authentication policies, rewrite rules, responder policies, and traffic steering mechanisms
• Design, implement, and maintain secure authentication and conditional access policies based on user identity, device type, network location, and contextual risk factors
• Participate in the design, implementation, and rollout of the Bank’s Zscaler Private Access (ZPA) platform
• Develop and maintain expertise across both Citrix NetScaler Gateway and Zscaler Private Access (ZPA) technologies
• Plan, coordinate, and execute infrastructure upgrades, security patches, policy changes, and platform enhancements
• Provide 2nd and 3rd level engineering support for the Bank’s remote access platforms, acting as an escalation point for complex incidents and participating in a shared 24/7 on-call rotation for critical services

Requirements

• University degree or higher technical education (university of applied sciences, federal diploma) in Computer Science, Information Security, or a related discipline — or equivalent practical experience
• Minimum 3–5 years of hands-on experience in IT Security or Infrastructure Engineering, with a strong focus on secure remote access, identity management, authentication technologies, and endpoint security
• In-depth expertise in Citrix NetScaler ADC and NetScaler Gateway, including hands-on experience with AAA policies, virtual server configuration, SSL-VPN services, high-availability deployments, authentication flows, and troubleshooting via both GUI and CLI
• Knowledge of Zero Trust Network Access (ZTNA) concepts and architectures; experience with Zscaler Private Access (ZPA) or comparable ZTNA technologies is considered an advantage
• Practical scripting and automation skills using one or more of PowerShell, Python, or Bash, including automation of certificate validation, health checks, log analysis, and operational tasks through REST APIs, Citrix Nitro API, or comparable interfaces
• Practical experience with Microsoft Entra ID (Azure AD), Active Directory, and hybrid identity environments
• Proven experience integrating remote access platforms with Multi-Factor Authentication (MFA) solutions and modern identity providers
• Strong understanding of endpoint compliance validation, device trust concepts, BYOD access models, and modern remote access security architectures
• Experience working within financial services or other highly regulated industries, with a solid understanding of regulatory and compliance requirements
• Strong communication and collaboration skills, with the ability to work effectively across global teams and translate technical concepts into practical solutions
• Fluent written and spoken English (B2/C1).

Tech Stack

• Azure
• Citrix
• Python

Benefits

• Flexible working options
• Health and well-being support
• Extensive career development programmes