Remote Access Engineer (Citrix NetScaler & ZScaler Private Access)

Tasks

• Manage, configure, and continuously improve the bank's Citrix NetScaler ADC and ZScaler Private Access appliances as part of a dedicated security engineering team.
• Operation of the Zero Trust Network Access (ZTNA) platform in a fully managed 24x7 ITSM environment: lifecycle management of planning and requirements, specifications, configuration, authentication policies, remote locations, logging, reporting, and traffic learning.
• Design, implementation, and monitoring of secure remote access solutions for internal and external users (ZTNA platform), supporting the bank’s diverse stakeholders: SaaS (Web) access policies, RDB (Remote Data Access), Web (TLS) inspection, and Vless-based remote and web access (ZTNA platform); Supporting the bank’s on-site, on-premises/OS environments, remote work, and user virtualization. Requirements include securing sensitive internal infrastructure through application delivery (ZTNA), improving compliance and reducing the attack surface, enhancing endpoint security, managing data residency, and supporting emerging technologies such as AI.
• Provide on-call and hands-on maintenance support for the bank's secure remote access platform, serve as the escalation point for complex incidents and implementations, and ensure 99.5% to 99.9%+ availability for critical services.
• Remote engineering of the bank's Zero-Trust Network Access (ZTNA) platform to ensure enterprise-wide, secure, and highly available remote connectivity for all users, from branch employees to the executive board and beyond.
• Key areas of responsibility as the person in charge of the ZTNA (Zero Trust Network Access) solution:
  • SaaS (Web) Access Policies: Secure access to SaaS applications (e.g., Microsoft 365, Salesforce, SAP Concur, Workday, etc.).
  • Verification of Access Policies & Privileged Access Management (PAM): Management and maintenance of access policies and (where applicable) PAM integrations via ZTNA, Microsoft Entra (Identity), etc.
  • Enforcing a strong zero-trust posture across user traffic, endpoints, and applications.

Requirements

• A highly proactive, solution-oriented approach to work, as well as self-motivation and strong analytical and problem-solving skills.
• Practical knowledge of ITSM and ITSM-based incident management (logging, ticketing, status updates).
• Strong analytical and conceptual skills, combined with a high level of expertise in IT and system administration, ideally gained through experience working in internal chat rooms and fast-paced escalation environments.
• Leverage the role's expertise for success milestone metrics (1 new company/team member roadmap).