105 189
14 861
We are looking for an experienced Network Security Engineer to support a strategic Zero Trust initiative focused on micro-segmentation within a large enterprise environment. The project aims to enhance network security posture by separating services currently operating on shared Subnet IPs (SNIPs) into dedicated SNIPs on Citrix NetScaler load balancers. This transformation will enable improved end-to-end connection logging, stronger traffic visibility, and alignment with internal security and incident response standards.
Scope of Responsibilities
Analyze existing Citrix NetScaler configurations and identify services using shared SNIPs
Design and implement a dedicated SNIP architecture aligned with Zero Trust principles
Plan and manage subnet allocation and IP addressing for new SNIPs
Configure and modify NetScaler (Citrix ADC) settings in production environments
Migrate services from shared to dedicated SNIPs with minimal business impact
Implement and validate end-to-end (E2E) connection logging on load balancers
Troubleshoot network segmentation and load balancing issues
Produce technical documentation covering architecture, configuration, and migration procedures
Collaborate with security and incident response teams to ensure compliance with internal standards
Required Profile
Strong hands-on experience with Citrix NetScaler (Citrix ADC)
Advanced understanding of SNIP (Subnet IP) management and IP addressing
Solid experience with L4/L7 load balancing configuration
Good understanding of Zero Trust principles and network micro-segmentation
Experience working in enterprise / regulated environments
Ability to independently design and execute infrastructure changes
Nice to Have
Experience with SIEM integration and advanced logging solutions
Knowledge of firewall policies and east-west traffic control
Experience in security-driven transformation projects
Familiarity with automation tools (e.g., Ansible, Terraform)
Understanding of CSIRT processes and incident response frameworks