NetScaler Engineer

The NetScaler Engineer owns the design, operation, and security of the Citrix NetScaler (formerly Citrix ADC) environment, with a primary focus on the NetScaler Gateway (Citrix Access Gateway) platform that gives employees and partners secure remote access to Citrix Virtual Apps and Desktops.

The role keeps remote access available, fast, and secure; resolves complex connectivity and authentication issues; and leads upgrades, patching, and improvements across the gateway estate.

·       Administer, configure, and maintain NetScaler Gateway virtual servers for ICA proxy access to Citrix Virtual Apps and Desktops and Citrix Workspace.

·       Integrate gateways with StoreFront and/or Citrix Cloud (Workspace), including session policies, profiles, callback URLs, and Secure Ticket Authority (STA) configuration.

·       Build and support authentication flows using nFactor, LDAP/LDAPS, RADIUS, SAML, and multi-factor authentication providers such as Microsoft Entra ID, Okta, Duo, or RSA.

·       Configure and troubleshoot Endpoint Analysis (EPA) scans, SmartAccess and SmartControl policies, and client certificate authentication.

·       Serve as the escalation point for remote access incidents, including login failures, STA errors, session drops, HDX/EDT performance, and reconnect problems.

·       Support HDX optimization through the gateway, including EDT (UDP/DTLS), Session Reliability, and audio/video for Microsoft Teams and softphone traffic.

·       Manage NetScaler BLX, CPX, VPX, MPX, and/or SDX appliances in high-availability pairs and clusters, including GSLB across data centers.

·       Plan and execute firmware upgrades and emergency security patching, tracking vendor security bulletins and CVEs and applying fixes within defined SLAs.

·       Manage SSL/TLS certificates, cipher groups, and SSL profiles; track renewals to prevent certificate-related gateway outages.

·       Configure load balancing, content switching, responder, and rewrite policies for StoreFront, Director, and other internal services.

·       Use NetScaler Console (formerly ADM), logs, and packet traces such as nstrace and Wireshark for monitoring, analytics, and root-cause analysis.

·       Automate configuration and routine tasks with the NITRO API, PowerShell, Python, or Ansible/Terraform where practical.

·       Migrate NetScalers from VMware ESXi clusters to Oracle OCI clusters.

·       Harden gateway configurations against current security baselines and support vulnerability scans, penetration tests, and audits.

·       Follow change-management processes for all production changes, including test plans, rollback steps, and post-change validation.

·       Maintain current architecture diagrams, runbooks, configuration standards, and disaster recovery procedures.

·       Work with Citrix/VDI, Active Directory, identity, firewall, network, and service desk teams, and with vendor support on escalated cases.

·       5+ years of Hands-on experience deploying and troubleshooting NetScaler Gateway for Citrix Virtual Apps and Desktops (XenApp/XenDesktop) and StoreFront.

·       Strong understanding of TCP/IP, DNS, SSL/TLS, PKI, HTTP, and load-balancing concepts.

·       Experience with directory and identity integration, including Active Directory, LDAP, RADIUS, SAML, and MFA providers.

·       Proficiency with packet-capture analysis and structured troubleshooting of authentication and connectivity issues.

·       Experience with high-availability pair operations, firmware upgrades, and certificate lifecycle management.

·       Clear written and verbal communication skills, including the ability to explain technical issues to non-technical users.

·       Ability to overlap 5 hours with US Central time zone hours

·       Current NetScaler or Citrix networking certification, such as Citrix Certified Associate or Professional – Networking.

·       Understanding of virtualization platforms such as VMware ESXi and Oracle OCI

·       Experience with Citrix Cloud, Gateway Service, Cloud Connectors, and hybrid Citrix deployments.

·       Experience with NetScaler Console (ADM), GSLB, and Web App Firewall (WAF).

·       Scripting and automation experience with the NITRO API, PowerShell, Python, Ansible, or Terraform.

·       Exposure to Zero Trust or ZTNA alternatives, such as Citrix Secure Private Access, and cloud platforms such as Azure or AWS.

·       Experience in a regulated environment, such as healthcare (HIPAA) or finance.