Security Architect

N2S.Global; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Job summary

N2S.Global is seeking an experienced Security Architect to design, implement, and optimize secure access solutions for a hybrid workforce. You will lead end-to-end Citrix SPA and ZTNA deployments, aligning with Zero Trust principles and enterprise security requirements.

Responsibilities include creating design docs, configuring adaptive authentication, migrating from VPNs to Zero Trust, and collaborating with security, infrastructure, and identity teams to ensure high availability and resilient

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Citrix certifications (CCA, CCP, CCE) preferred.
• Experience with cloud security architectures across Azure, AWS, or GCP.
• Strong understanding of enterprise security frameworks and compliance requirements.

Responsibilities

• Design end-to-end Citrix SPA and ZTNA solutions for secure, scalable access.
• Develop secure access architectures aligned with Zero Trust principles.
• Create high-level and low-level design docs, implementation plans, and standards.
• Lead deployment and configuration of SPA solutions across enterprise environments.
• Implement secure connectivity for hybrid/remote workforce models.
• Drive migration from VPN architectures to Zero Trust.
• Define and implement contextual access policies based on identity, risk, and device posture.
• Collaborate with security, infrastructure, networking, and identity teams.
• Provide architectural guidance and technical leadership throughout projects.

Skills

Citrix SPA

ZTNA

IAM

SASE

Citrix Cloud

Citrix Gateway

Zero Trust

OIDC

OAuth

SAML

DNS

TLS/SSL

Windows Troubleshooting

AppDNA

Active Directory

Cloud Security

Education

Bachelor's degree

Job description

We are seeking an experienced Security Architect with deep expertise in Citrix Secure Private Access (SPA), Zero Trust Network Access (ZTNA), and modern secure access architectures. This role will be responsible for designing, implementing, and optimizing secure access solutions that support a hybrid workforce while enhancing security, user experience, and operational efficiency.

Core Responsibilities

• Design and architect end-to-end Citrix Secure Private Access (SPA) and ZTNA solutions to provide secure, scalable, and seamless access for enterprise users.
• Develop secure access architectures aligned with Zero Trust principles and organizational security requirements.
• Create high-level and low-level design documentation, implementation plans, and architecture standards.

ZTNA Implementation

• Lead deployment and configuration of Citrix Secure Private Access (SPA) solutions across enterprise environments.
• Implement secure connectivity solutions for hybrid and remote workforce models.
• Drive migration from traditional VPN architectures to Zero Trust access frameworks.

Policy Configuration & Security Controls

• Define and implement contextual access policies based on user identity, device posture, risk level, location, and application sensitivity.
• Configure adaptive authentication and risk-based access controls to strengthen security posture.
• Ensure compliance with enterprise security and governance standards.

Application Onboarding & Access Management

• Configure secure access for:SaaS applications
• Web applications
• Client-server applications
• TCP/UDP-based applications
• Manage application segmentation and least-privilege access models.
• Configure isolated browsing capabilities and secure web access controls.
• Enhance protection against web-based threats and data leakage risks.

Performance Optimization

• Optimize traffic routing through Citrix Cloud Connectors and Citrix Gateway.
• Monitor and improve application performance, accessibility, and user experience.
• Ensure high availability, scalability, and resilience of secure access services.

Stakeholder Collaboration

• Partner with security, infrastructure, networking, application, and identity teams to deliver secure access initiatives.
• Provide architectural guidance and technical leadership throughout project lifecycles.
• Support operational teams in troubleshooting and continuous improvement efforts.

Mandatory Skills & Experience

Citrix Security Technologies

• Deep expertise in:Citrix Secure Private Access (SPA)
• Citrix Cloud
• Citrix Gateway

Zero Trust & Network Security

• Strong understanding of:Zero Trust Architecture (ZTA)
• Zero Trust Network Access (ZTNA)
• Identity and Access Management (IAM)
• SASE (Secure Access Service Edge)

Identity & Authentication

• Hands-on experience integrating with:Microsoft Entra ID (Azure AD)
• Okta
• Ping Identity
• Active Directory

Security Protocols

• Strong knowledge of:SAML
• OAuth
• OpenID Connect (OIDC)
• DNS
• TLS/SSL

Operating Systems & Troubleshooting

• Advanced troubleshooting skills across Windows environments.
• Experience diagnosing authentication, connectivity, policy, and application access issues.

VPN Modernization

• Proven experience replacing legacy remote access solutions such as:Cisco VPN
• Pulse Secure
• Similar hardware/software VPN technologies

Required / Deal Breaker Skill

Citrix AppDNA

• Hands-on experience with Citrix AppDNA is mandatory.
• Candidates without AppDNA implementation or assessment experience will not be considered.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Citrix certifications (CCA, CCP, CCE) preferred.
• Experience with cloud security architectures across Azure, AWS, or GCP.
• Strong understanding of enterprise security frameworks and compliance requirements.