At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let's shape the future of wealth management together.Julius Baer Group Ltd. acts in the sector Private Banking and is present in over 25 countries and around 60 locations. With the Headquartered in Zurich, we have offices in key locations including Bangkok, Dubai, Dublin, Frankfurt, Geneva, Hong Kong, London, Luxembourg, Madrid, Mexico City, Milan, Monaco, Mumbai, Santiago de Chile, São Paulo, Shanghai, Singapore, Tel Aviv and Tokyo.Join our global team and play a critical role in safeguarding our digital landscape as an IT Security Engineer.We're seeking a skilled expert to contribute to the engineering and operations of our Internet proxy (Zscaler) and remote access (Citrix NetScaler & Zscaler) solutions.YOUR CHALLENGEMain Job ResponsibilitiesPlay a key role in the design, implementation, and operational governance of Julius Baer's secure web and remote access infrastructure, ensuring resilient, policy-compliant connectivity for thousands of users across integral offices and remote locationsOperate and maintain the enterprise Zscaler Internet Access (ZIA) platformAdminister and support Citrix NetScaler (now Citrix ADC) as the primary gateway for corporate SSL- VPNs and secure BYOD access to internal applicationsSupport adoption of Zscaler Private Access (ZPA)Lead incident resolution for complex disruptions, serving as a Tier 2/Tier 3 escalation point through detailed root cause analysis (RCA), corrective actions, and implementation of preventative controls to strengthen service resilienceEnsure full compliance of internet proxy and remote access solutions with Julius Baer's information security policies, regulatory frameworks, and internal audit requirements, maintaining rigorous control over access entitlements and cryptographic materialMaintain authoritative technical documentation in Confluence, covering system architectures,



operational procedures, integration specifications, and post-incident reviews to support knowledge sharing and operational continuityDrive continuous service improvement by enhancing system reliability, security posture, performance, observability, and automation, with a clear focus on increasing operational efficiency and reducing manual effortStay ahead of emerging threats and technological developments in web security, encrypted traffic analysis, and identity-centric access models - recommending strategic upgrades, architectural refinements, and new controls to future-proof the bank's infrastructureClient Management (internal & external)Various IT functions, both regionally and globallyLocal Legal and Compliance functionsBusiness ManagementKey stakeholders include IT Service Owners, IT Infrastructure, IT Application Managers, ITArchitecture and Project ManagersCRO functions - including Business Operational Risk, Information Security and Compliance functionsGlobal functions - IT Security Solutions, Security ArchitectureEstablish strong relationship with key stakeholders and across the internal ITRegulatory Responsibilities &/OR Risk ManagementEnsure appropriate ethical and compliant behaviour within the area of responsibility by clear demonstration of appropriate values and behaviours including but not limited to standards on honesty and integrity, due care and diligence, fair dealing (treating customers fairly), management of conflicts of interest, competence and continuous development, adequate risk management, and compliance with applicable laws and regulationsYOUR PROFILEExpertise in Zscaler technologies,



with hands-on experience in deploying and managing Zscaler Internet Access (ZIA) and Private Access (ZPA)Proven operational experience with Citrix NetScaler (Citrix ADC/Gateway) for SSL-VPN and BYOD accessSolid understanding of secure web gateways, proxy architectures, zero trust principles, and remote access security modelsUnderstanding of network security fundamentals: firewalls, load balancing, WAF concepts, TLS/SSL, DNS, and IP routing - especially as applied in DMZ and extranet zonesPractical understanding of key IT security domains;

experience with one or more of the following is advantageous: Public Key Infrastructure (PKI);

Privileged AccessManagement (PAM);

Secure Secrets Management (Vault);

Multi-factor Authentication (MFA) frameworksMinimum of 2-3 years in 2nd and 3rd line engineering or operations roles supporting enterprise-grade IT security services, ideally within complex, highly regulated environments (e.G., financial services)Relevant academic background (e.G., Bachelor's or Master's degree in Computer Science, Information Security, or related discipline) - or equivalent practical experienceIndustry certifications such as CISSP, CISM, or CEH are considered a strong assetZscaler Accredited Configuration Engineer (ACE) (or higher) is desirable but not mandatoryCSG 1Y0-341 (or higher) is desirable but not mandatory.Team player, strong collaborator with the willingness to take ownershipExcellent communication skills in spoken and written formStrong desire to learn and develop new skillsHighly proactive, self-driven, and focused on delivering measurable results.Capable of independent decision-making, including prioritising and resolving incidents and change requests under minimal supervision.Strong analytical and conceptual thinking skills, with attention to detail and long-term architectural implicationsAbility to thrive in a globally distributed team environment#J-18808-Ljbffr

📌 Security Engineer For Intenet Proxy And Remote Access Apac 100% (F/M/D) (Alcobendas)
🏢 Julius Baer Group
📍 Alcobendas