Security Engineer for Intenet Proxy and Remote Access APAC 100% (f/m/d)

Bank Julius Bär & Co. Ltd.; Madrid; À distance; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Julius Baer in Madrid is seeking an experienced IT security engineer to design, deploy and govern secure web and remote access infrastructure across global offices and remote sites.

You will operate Zscaler ZIA/ZPA, manage Citrix NetScaler (ADC) for SSL-VPN and BYOD, lead incident resolution, ensure policy compliance, and document architectures and procedures to strengthen resilience.

Qualifications

• Expertise in Zscaler technologies with hands-on ZIA and ZPA deployment experience.
• Operational experience with Citrix NetScaler (ADC/Gateway) for SSL-VPN and BYOD access.
• Strong understanding of secure web gateways, proxy architectures, zero-trust and remote access security.
• Knowledge of network security fundamentals: firewalls, TLS/SSL, DNS, IP routing in DMZ/extranet zones.

Responsabilités

• Design, implement, and govern secure web and remote access infrastructure across global offices and remote locations.
• Operate and maintain ZIA and ZPA platforms.
• Administer Citrix NetScaler (ADC/Gateway) for SSL-VPN and BYOD access to internal apps.
• Lead incident resolution and perform RCA, corrective actions and preventative controls.
• Ensure compliance with security policies, regulatory frameworks, and audits; control access entitlements and cryptographic material.
• Maintain technical documentation in Confluence covering architectures and procedures.
• Drive improvements in reliability, security posture, and automation to reduce manual effort.
• Monitor emerging threats and recommend upgrades to future-proof infrastructure.

Connaissances

Zscaler expertise

Citrix NetScaler

Secure web gateways

Remote access security

Incident resolution

2–3 years security operations

Bachelor/Master in CS/InfoSec

Security certifications (CISSP/CISM/CE

ACE / CSG knowledge

Formation

Bachelor’s or Master’s degree in Computer Science or Information Security

Outils

Confluence

Description du poste

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together. Julius Baer Group Ltd. acts in the sector Private Banking and is present in over 25 countries and around 60 locations. With the Headquartered in Zurich, we have offices in key locations including Bangkok, Dubai, Dublin, Frankfurt, Geneva, Hong Kong, London, Luxembourg, Madrid, Mexico City, Milan, Monaco, Mumbai, Santiago de Chile, São Paulo, Shanghai, Singapore, Tel Aviv and Tokyo.

YOUR CHALLENGE

Main Job Responsibilities

• Play a key role in the design, implementation, and operational governance of Julius Baer’s secure web and remote access infrastructure, ensuring resilient, policy-compliant connectivity for thousands of users across global offices and remote locations
• Operate and maintain the enterprise Zscaler Internet Access (ZIA) platform
• Administer and support Citrix NetScaler (now Citrix ADC) as the primary gateway for corporate SSL‑VPNs and secure BYOD access to internal applications
• Support adoption of Zscaler Private Access (ZPA)
• Lead incident resolution for complex disruptions, serving as a Tier 2/Tier 3 escalation point through detailed root cause analysis (RCA), corrective actions, and implementation of preventative controls to strengthen service resilience
• Ensure full compliance of internet proxy and remote access solutions with Julius Baer’s information security policies, regulatory frameworks, and internal audit requirements, maintaining rigorous control over access entitlements and cryptographic material
• Maintain authoritative technical documentation in Confluence, covering system architectures, operational procedures, integration specifications, and post‑incident reviews to support knowledge sharing and operational continuity
• Drive continuous service improvement by enhancing system reliability, security posture, performance, observability, and automation, with a clear focus on increasing operational efficiency and reducing manual effort
• Stay ahead of emerging threats and technological developments in web security, encrypted traffic analysis, and identity‑centric access models — recommending strategic upgrades, architectural refinements, and new controls to future‑proof the bank’s infrastructure

Client Management (internal & external)

Various IT functions, both regionally and globally

Local Legal and Compliance functions

Business Management Key stakeholders include IT Service Owners, IT Infrastructure, IT Application Managers, IT Architecture and Project Managers CRO functions – including Business Operational Risk, Information Security and Compliance functions Global functions – IT Security Solutions, Security Architecture

Establish strong relationship with key stakeholders and across the internal IT Regulatory Responsibilities &/OR Risk Management

Ensure appropriate ethical and compliant behaviour within the area of responsibility by clear demonstration of appropriate values and behaviours including but not limited to standards on honesty and integrity, due care and diligence, fair dealing (treating customers fairly), management of conflicts of interest, competence and continuous development, adequate risk management, and compliance with applicable laws and regulations

YOUR PROFILE

• Expertise in Zscaler technologies, with hands‑on experience in deploying and managing Zscaler Internet Access (ZIA) and Private Access (ZPA)
• Proven operational experience with Citrix NetScaler (Citrix ADC/Gateway) for SSL‑VPN and BYOD access
• Solid understanding of secure web gateways, proxy architectures, zero trust principles, and remote access security models
• Understanding of network security fundamentals: firewalls, load balancing, WAF concepts, TLS/SSL, DNS, and IP routing — especially as applied in DMZ and extranet zones
• Practical understanding of key IT security domains; experience with one or more of the following is advantageous: Public Key Infrastructure (PKI); Privileged Access Management (PAM); Secure Secrets Management (Vault); Multi‑factor Authentication (MFA) frameworks
• Minimum of 2–3 years in 2nd and 3rd line engineering or operations roles supporting enterprise‑grade IT security services, ideally within complex, highly regulated environments (e.g., financial services)
• Relevant academic background (e.g., Bachelor’s or Master’s degree in Computer Science, Information Security, or related discipline) — or equivalent practical experience
• Industry certifications such as CISSP, CISM, or CEH are considered a strong asset
• Zscaler Accredited Configuration Engineer (ACE) (or higher) is desirable but not mandatory
• CSG 1Y0-341 (or higher) is desirable but not mandatory
• Team player, strong collaborator with the willingness to take ownership
• Excellent communication skills in spoken and written form
• Strong desire to learn and develop new skills
• Highly proactive, self‑driven, and focused on delivering measurable results
• Capable of independent decision‑making, including prioritising and resolving incidents and change requests under minimal supervision
• Strong analytical and conceptual thinking skills, with attention to detail and long‑term architectural implications
• Ability to thrive in a globally distributed team environment

Further interesting job opportunities can be found on our Career site.

The international reference in wealth management Julius Baer is the leading Swiss wealth management group. We focus on servicing and advising sophisticated private clients from around the world, taking into account what truly matters to them – in their business and personal life, today and for future generations. Headquartered in Zurich, we are present in around 60 locations worldwide, including Bangkok, Dubai, Dublin, Frankfurt, Geneva, Hong Kong, London, Luxembourg, Madrid, Mexico City, Milan, Monaco, Mumbai, Santiago de Chile, Shanghai, Singapore, Tel Aviv, and Tokyo.

Why join Julius Baer?

At Julius Baer our employees enjoy the benefits of a global company with the support and collegiality of a much smaller one. We are growing quickly, but we remain dedicated to maintaining our accessible structure with flat hierarchies, and approachable and supportive leaders. With offices around the world, we offer an international and stimulating work environment and the opportunity to work with a diverse team of highly motivated colleagues, bringing the best of the bank to our clients. Our core values of Care, Passion, and Excellence define the tone of how we interact with each other and our partners. Committed to your success Whether nurturing young talent with our renowned apprentice scheme, enabling ambitious university graduates to put theory into practice with our Graduate Programme, or providing first‑class opportunities for experienced professionals, we look after our employees. We believe in continuous learning as a company and as individuals, which is why we put a focus on the health and well-being of our employees and offer flexible working options, a wide array of benefits, and extensive career development programmes.

For more information visit www.juliusbaer.com or contact us via the Contact Form.