Remote Access Engineer (Citrix NetScaler & Zscaler Private Access)

Location: Remote, based in Madrid, Spain; participation in a shared 24/7 on-call rotation is required.

Company

hirify.global is a financial services institution focused on wealth management.

What you will do

• Administer, configure, and improve Citrix NetScaler ADC and NetScaler Gateway infrastructure across primary and disaster recovery environments.
• Manage SSL-VPN and clientless access services, including virtual servers, authentication policies, rewrite rules, responder policies, and traffic steering.
• Design and maintain secure authentication and conditional access policies based on identity, device posture, network location, and risk.
• Help design, implement, test, and operationalize the Zscaler Private Access platform and the transition to Zero Trust Network Access.
• Plan and execute upgrades, patches, policy changes, and platform enhancements under regulated change management processes.
• Provide second- and third-level support, resolve complex incidents, and participate in the shared 24/7 on-call rotation.

Requirements

• 3–5 years of hands-on experience in IT security or infrastructure engineering, focused on secure remote access, identity management, authentication, and endpoint security.
• In-depth Citrix NetScaler ADC and NetScaler Gateway expertise, including AAA policies, SSL-VPN, high availability, authentication flows, and GUI/CLI troubleshooting.
• Experience with Microsoft Entra ID, Active Directory, hybrid identity environments, and MFA integrations.
• Knowledge of ZTNA, endpoint compliance, device trust, BYOD access models, and modern remote access security architectures.
• Practical scripting and automation skills with PowerShell, Python, or Bash, including REST API or Citrix Nitro API use.
• University degree or equivalent practical experience, strong collaboration skills, and fluent written and spoken English at B2/C1 level.

Nice to have

• Hands-on experience with Zscaler Private Access or comparable ZTNA technologies.
• Experience in financial services or another highly regulated industry.
• Exposure to additional security services such as Internet Proxy, PAM, PKI, or Secure Mail Gateway.

Culture & Benefits

• Work within a collaborative global security engineering team.
• Contribute to a strategic modernization of remote access and security services.
• Gain hands-on exposure across multiple security domains.
• Support business-critical infrastructure with a focus on resilience, performance, security, and compliance.

Hiring process

• Submit a full application through the online application tool.