IT Security Engineer – Internet Proxy & Remote Access

Tasks

• Design, implementation, and operation of secure web and remote access infrastructure to ensure resilient, policy-compliant access for thousands of remote users in global offices and data centers.
• Operation and maintenance of the Enterprise Zurich Internet Access (ZIA) platform.
• Administration and support of Citrix NetScaler (or Citrix ADC/Gateway) as the primary gateway for corporate SSL VPN and secure access connections (STOC).
• Support for solutions for Julius Baer's Private Access (ZPA).
• Lead incident response efforts for computer disruptions to ensure a Tier 2/Tier 3 escalation point through layered incident response measures.
• Maintenance of state-of-the-art Internet proxy and remote access solutions to ensure compliance with information security policies, regulatory frameworks, and internal audit requirements.

Requirements

• Expertise in ZScaler technologies, with hands-on experience in implementing and managing ZScaler Internet Access (ZIA) and Private Access (ZPA).
• Proven operational experience with Citrix NetScaler (Citrix ADC/Gateway) for SSL VPN and BYO access.
• Understanding of network security fundamentals, firewalls, load balancing, WAF concepts, TLS/SSL/DNS, and routing.
• Practical understanding of key IT security domains; experience in one or more of the following areas is an advantage:
  • Public Key Infrastructure (PKI)
  • Privileged Access Management (PAM)
  • Secure Remote Management (SRM)
  • Multi-factor authentication (MFA) frameworks
• At least 2-3 years of experience in 2nd and 3rd line engineering or operations roles, supporting enterprise IT security services, ideally in control and compliance environments (e.g., financial services).
• Relevant academic background (e.g., bachelor's or master's degree in computer science, information security, or a related field) or equivalent practical experience.
• Industry certifications such as CISSP, CISSP-ISSAP, CISM, CISA, CEH, and CSCI are a strong advantage.

We offer

Further requirements

• Strong analytical and conceptual thinking skills, with attention to detail and long-term architectural implications.
• Ability to thrive in a globally distributed team environment.
• Good understanding of the technological regulatory framework in Singapore and Hong Kong.