Network Specialist Citrix

We are looking for an experienced Network Security Engineer to support a strategic Zero Trust initiative focused on micro-segmentation within a large enterprise environment. The project aims to enhance network security posture by separating services currently operating on shared Subnet IPs (SNIPs) into dedicated SNIPs on Citrix NetScaler load balancers. This transformation will enable improved end-to-end connection logging, stronger traffic visibility, and alignment with internal security and incident response standards.

Scope of Responsibilities

• Analyze existing Citrix NetScaler configurations and identify services using shared SNIPs

• Design and implement a dedicated SNIP architecture aligned with Zero Trust principles

• Plan and manage subnet allocation and IP addressing for new SNIPs

• Configure and modify NetScaler (Citrix ADC) settings in production environments

• Migrate services from shared to dedicated SNIPs with minimal business impact

• Implement and validate end-to-end (E2E) connection logging on load balancers

• Troubleshoot network segmentation and load balancing issues

• Produce technical documentation covering architecture, configuration, and migration procedures

• Collaborate with security and incident response teams to ensure compliance with internal standards

Required Profile

• Strong hands-on experience with Citrix NetScaler (Citrix ADC)

• Advanced understanding of SNIP (Subnet IP) management and IP addressing

• Solid experience with L4/L7 load balancing configuration

• Good understanding of Zero Trust principles and network micro-segmentation

• Experience working in enterprise / regulated environments

• Ability to independently design and execute infrastructure changes

Nice to Have

• Experience with SIEM integration and advanced logging solutions

• Knowledge of firewall policies and east-west traffic control

• Experience in security-driven transformation projects

• Familiarity with automation tools (e.g., Ansible, Terraform)

• Understanding of CSIRT processes and incident response frameworks