Remote Access Engineer (Citrix NetScaler & Zscaler Private Access)

Location: Zurich, Switzerland; 100% remote position associated with the Zurich location.

Company

hirify.global is a financial services organization focused on wealth management and secure banking infrastructure.

What you will do

• Administer, configure, and improve Citrix NetScaler ADC and NetScaler Gateway infrastructure across primary and disaster recovery environments.
• Manage SSL-VPN and clientless access services, including virtual servers, authentication policies, rewrite rules, responder policies, and traffic steering.
• Design and maintain authentication and conditional access policies based on identity, device type, network location, and contextual risk.
• Contribute to the design, rollout, testing, and operationalisation of the Zscaler Private Access platform and Zero Trust Network Access architecture.
• Automate certificate validation, health checks, log analysis, and operational tasks through scripting and APIs.
• Provide second- and third-level support, manage upgrades and security patches, and participate in a shared 24/7 on-call rotation.

Requirements

• University degree or equivalent practical experience in Computer Science, Information Security, or a related discipline.
• 3–5 years of hands-on experience in IT Security or Infrastructure Engineering, focused on secure remote access, identity management, authentication, and endpoint security.
• Deep practical expertise with Citrix NetScaler ADC and NetScaler Gateway, including AAA policies, SSL-VPN, high availability, authentication flows, and GUI/CLI troubleshooting.
• Experience with scripting and automation using PowerShell, Python, or Bash, plus REST APIs, Citrix Nitro API, or comparable interfaces.
• Practical experience with Microsoft Entra ID, Active Directory, hybrid identity environments, MFA integration, endpoint compliance, device trust, and BYOD access models.
• Fluent written and spoken English at B2/C1 level, with experience in financial services or another highly regulated industry.

Nice to have

• Experience with Zscaler Private Access or comparable Zero Trust Network Access technologies.

Culture & Benefits

• Work within a global security engineering team and collaborate with IAM, Endpoint Management, Security Operations, and Global IT.
• Opportunity to broaden expertise across Internet Proxy, MFA, Privileged Access Management, PKI, and Secure Mail Gateway services.
• Work on business-critical infrastructure with a focus on availability, resilience, performance, security, and regulatory compliance.