Julius Baer is a Swiss private banking group focused on wealth management for high-net-worth individuals and families. Its services combine personalized financial guidance with investment solutions designed to support clients’ long-term wealth preservation and growth across generations. The group’s work spans private banking, finance, and related advisory services, with a large international team supporting its client-focused approach.
Remote Access Engineer (Citrix NetScaler & Zscaler Private Access) – Julius Baer, Zurich Onsite
Julius Baer is seeking a Remote Access Engineer to secure wealth-management infrastructure with Citrix NetScaler and Zscaler Private Access. The role covers Zero Trust access, identity controls, platform resilience, and critical-incident support.
Description
- Administer, configure, and enhance Julius Baer’s Citrix NetScaler ADC and NetScaler Gateway infrastructure across production and disaster recovery environments
- Maintain SSL-VPN and clientless access services, including virtual servers, authentication policies, rewrite and responder rules, and traffic steering
- Create and manage authentication and conditional-access policies based on identity, device type, network location, and contextual risk
- Contribute to the design, implementation, and rollout of the bank’s Zscaler Private Access platform
- Help transition remote access toward a Zero Trust Network Access architecture through technical design, testing, integration, and operational preparation
- Build and maintain advanced expertise in Citrix NetScaler Gateway and Zscaler Private Access technologies
- Plan and deliver infrastructure upgrades, security patches, policy changes, and platform improvements through formal change management
- Provide second- and third-level engineering support and serve as an escalation point for complex incidents
- Join a shared 24/7 on-call rotation supporting critical services
Requirements
- Demonstrated initiative, a solutions-focused approach, and the ability to independently evaluate, prioritise, and resolve complex technical issues
- Strong analytical and conceptual abilities, with careful attention to detail in business-critical and regulated environments
- University degree or advanced technical qualification in Computer Science, Information Security, or a related field, or equivalent professional experience
- At least 3–5 years of practical experience in IT security or infrastructure engineering, particularly secure remote access, identity management, authentication, and endpoint security
- Advanced knowledge of Citrix NetScaler ADC and NetScaler Gateway, including AAA policies, virtual servers, SSL-VPN, high availability, authentication flows, and GUI/CLI troubleshooting
- Understanding of Zero Trust Network Access concepts and architectures; experience with Zscaler Private Access or a comparable platform is beneficial
- Hands-on scripting and automation experience with PowerShell, Python, or Bash
- Experience working with REST APIs, the Citrix Nitro API, or similar interfaces
- Practical knowledge of Microsoft Entra ID, Active Directory, and hybrid identity environments
- Experience connecting remote-access platforms with MFA solutions and modern identity providers
- Understanding of endpoint-compliance checks, device trust, BYOD access models, and modern remote-access security architecture
- Experience in financial services or another highly regulated sector, including awareness of regulatory and compliance obligations
- Background supporting business-critical infrastructure, with emphasis on availability, resilience, performance, and security
- Strong communication and collaboration skills in globally distributed teams
- Fluent written and spoken English at B2/C1 level
Benefits
- Full-time employment at 100%
- Participation in a shared 24/7 on-call rotation for critical services
- Opportunity to contribute to wider security services and develop expertise across multiple security domains