Remote Access Engineer; Citrix NetScaler & Zscaler Private Access f​/m​/d

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let's shape the future of wealth management together.

We are seeking an experienced Remote Access Engineer to join our global security engineering team. In this role, you will operate and enhance the Bank’s Citrix Net Scaler infrastructure, enforce secure access policies, and drive the evolution towards a Zero Trust Network Access (ZTNA) architecture using Zscaler Private Access (ZPA). Working closely with various IT and security teams, you will also have the opportunity to contribute to broader security services, including Multi‑Factor Authentication (MFA), Privileged Access Management (PAM), Public Key Infrastructure (PKI), and Secure Mail Gateway solutions.

• As part of a dedicated security engineering team, administer, configure, and continuously improve the Bank’s Citrix Net Scaler ADC and Net Scaler Gateway infrastructure, ensuring high availability, performance, scalability, and operational resilience across primary and disaster recovery environments

• Manage and maintain SSL-VPN and clientless access services, including virtual server configurations, authentication policies, rewrite rules, responder policies, and traffic steering mechanisms

• Design, implement, and maintain secure authentication and conditional access policies based on user identity, device type, network location, and contextual risk factors

• Participate in the design, implementation, and rollout of the Bank’s Zscaler Private Access (ZPA) platform, supporting the transition towards a modern Zero Trust Network Access architecture and contributing to technical design, testing, integration, and operational readiness activities

• Develop and maintain expertise across both Citrix Net Scaler Gateway and Zscaler Private Access (ZPA) technologies, supporting the Bank’s strategic remote access roadmap and ensuring secure, seamless connectivity across multiple access platforms

• Plan, coordinate, and execute infrastructure upgrades, security patches, policy changes, and platform enhancements in accordance with established change management processes within a regulated financial environment

• Provide 2nd and 3rd level engineering support for the Bank’s remote access platforms, acting as an escalation point for complex incidents and participating in a shared 24/7 on-call rotation for critical services

• Highly proactive, solution-oriented, and capable of independently assessing, prioritising, and resolving complex technical challenges in a structured and efficient manner

• Strong analytical and conceptual thinking skills with a high level of attention to detail, particularly when working within business-critical and highly regulated environments

• Willingness and curiosity to learn new technologies and expand expertise across multiple security domains, contributing to the continuous evolution of the Bank’s security services

• University degree or higher technical education (university of applied sciences, federal diploma) in Computer Science, Information Security, or a related discipline - or equivalent practical experience

• Minimum 3-5 years of hands-on experience in IT Security or Infrastructure Engineering, with a strong focus on secure remote access, identity management, authentication technologies, and endpoint security

• In-depth expertise in Citrix Net Scaler ADC and Net Scaler Gateway, including hands-on experience with AAA policies, virtual server configuration, SSL-VPN services, high-availability deployments, authentication flows, and troubleshooting via both GUI and CLI

• Knowledge of Zero Trust Network Access (ZTNA) concepts and architectures;…