Remote Access Engineer – Citrix NetScaler, Zscaler Private Access

This is a fully remote position, open to applicants in Switzerland.

📋 Description

• Oversee, configure, and consistently enhance the Bank’s Citrix NetScaler ADC and NetScaler Gateway infrastructure.

• Guarantee high availability, performance, scalability, and operational resilience across both primary and disaster recovery environments.

• Manage and sustain SSL-VPN and clientless access services, which include virtual server configurations, authentication policies, rewrite rules, responder policies, and traffic steering mechanisms.

• Design, implement, and uphold secure authentication and conditional access policies based on identity, device type, network location, and contextual risk.

• Engage in the design, implementation, and deployment of the Bank’s Zscaler Private Access (ZPA) platform.

• Facilitate the transition towards a Zero Trust Network Access architecture through technical design, testing, integration, and operational readiness activities.

• Cultivate and maintain expertise in Citrix NetScaler Gateway and ZPA technologies.

• Support the Bank’s strategic remote access roadmap and secure connectivity across various access platforms.

• Plan, coordinate, and execute infrastructure upgrades, security patches, policy changes, and platform enhancements following change management processes.

• Provide 2nd and 3rd level engineering support, serving as an escalation point for complex incidents.

• Participate in a shared 24/7 on-call rotation for critical services.

⛳️ Requirements

• University degree or higher technical education (university of applied sciences, federal diploma) in Computer Science, Information Security, or a related field — or equivalent practical experience.

• A minimum of 3–5 years of hands-on experience in IT Security or Infrastructure Engineering, with a focus on secure remote access, identity management, authentication technologies, and endpoint security.

• Extensive expertise in Citrix NetScaler ADC and NetScaler Gateway, including AAA policies, virtual server configuration, SSL-VPN services, high-availability deployments, authentication flows, and GUI/CLI troubleshooting.

• Familiarity with Zero Trust Network Access (ZTNA) concepts and architectures.

• Experience with Zscaler Private Access (ZPA) or similar ZTNA technologies is considered advantageous.

• Practical scripting and automation skills in PowerShell, Python, or Bash.

• Experience with REST APIs, Citrix Nitro API, or comparable interfaces.

• Practical experience with Microsoft Entra ID (Azure AD), Active Directory, and hybrid identity environments.

• Familiarity with integrating remote access platforms with Multi-Factor Authentication (MFA) solutions and modern identity providers.

• Understanding of endpoint compliance validation, device trust concepts, BYOD access models, and modern remote access security architectures.

• Experience in financial services or other highly regulated industries, including regulatory and compliance requirements.

• Experience supporting and operating business-critical infrastructure platforms with a focus on availability, resilience, performance, and security.

• Proficient in written and spoken English (B2/C1).

• Strong analytical, conceptual, communication, collaboration, and problem-solving skills.

🏝️ Benefits

• 100% (f/m/d) remote work arrangement.

• Participation in a shared 24/7 on-call rotation for critical services.

• Opportunity to contribute to broader security services and enhance expertise across multiple security domains.

• Collaboration with a global team.

• Access to an online application tool and job alert services.