Remote Access Engineer (Citrix NetScaler & Zscaler Private Access) 100% (f/m/d)

YOUR CHALLENGE

• As part of a dedicated security engineering team, administer, configure, and continuously improve Citrix NetScaler ADC and NetScaler Gateway infrastructure, ensuring high availability, performance, and operational resilience across primary and disaster recovery environments
• Manage and maintain SSL-VPN and clientless access services, including virtual server configuration, authentication policies, rewrite rules, responder policies, and traffic steering mechanisms
• Design, implement, and maintain access authentication and conditional access policies based on device type, network location, and contextual risk factors
• Participate in the design, implementation, and rollout of the Bank's Zscaler Private Access (ZPA) platform, supporting the transition towards a modern Zero Trust Network Access architecture and contributing to technical testing, design, integration, and operational readiness activities
• Develop and maintain expertise across both Citrix NetScaler Gateway and Zscaler Private Access technologies, supporting the Bank's strategic remote access roadmap and ensuring secure, seamless connectivity across multiple access platforms
• Plan, coordinate, and execute infrastructure upgrades, security patches, policy changes, and platform enhancements in accordance with established change management processes within a result-driven and agile team environment

Qualifications & Skills

• Demonstrated track record within a mature security and operations function, managing large-scale infrastructure and policy-based enforcement that maintain usability and provide an overall excellent user experience for Bank employee and contractor access to internal assets, securely, from home or on-the-road, in any location
• Knowledge of major security concepts and frameworks, as well as standards and guidelines published by national and international regulatory authorities (e.g., PKI and 3DS), as well standards issued by national and international associations and certifications (e.g., ISO, NIST, PCI, etc.)
• Experience in establishing and refining security policy frameworks and processes within the technology organization
• Strong communication and collaboration skills with the ability to communicate complex security issues and policy implications, and the technical impact thereof, to highly educated senior technical stakeholders, and on to perform knowledge transfer into technical teams and service desk teams
• Strong knowledge of operating systems, networks, and web technologies, including application programming interfaces (APIs) and secure distributed storage systems

What we're looking for

• Minimum of 5 years of experience in system, network, and/or application architect, design, and operations
• Working experience with cloud computing technologies, preferably CSPs (such as Azure, GCP, AWS, or similar)
• Experience in integrating various networking and security hardware and software appliances, which are used for configuration, usage, connectivity, management, integration, and monitoring
• Working experience with automation technologies and tools to deliver scalable security and infrastructure solutions using ITSM tools and scripting technologies with solid understanding of computer networking, including TCP/IP, NAT, routing, sub-netting, DNS, DHCP, and 802.1X
• Network security competencies and experience working with a wide variety of networking & security vendors (Fortinet, Next Generation Firewalls), IDPS products (Darktrace, DarkTracer, Proventia, Emerging Threats), and secure access solutions (Citrix NetScaler Access Gateway, ZScaler NTA, Zscaler Private Access, Jamf, Intune, or similar)
• Ability to work independently, collaboratively, and across geographical distances, across all business units and locations
• Strong written and spoken English (B2/C1)
• Strong analytical and conceptual thinking skills with a high level of attention to detail, particularly when working with complex processes and projects
• Willingness and curiosity to learn new technologies and expand expertise across multiple security domains in order to contribute to the continuous evolution of the Bank's security estate
• University degree or higher (university of applied sciences, federal diploma)
• Practical scripting and automation skills using one or more of PowerShell, Python, or Bash, including automation of certificate validation, health checks, log analysis, and operational tasks through REST or Nitro API, or comparable interfaces
• Practical experience with Microsoft Entra ID (Azure AD), Active Directory, and hybrid identity environments
• Proven experience integrating remote access platforms with Multi-Factor Authentication (MFA) and modern identity providers
• Strong understanding of endpoint compliance validation, device trust concepts, BYOD access models, and modern