NetScaler Engineer

Overview

The NetScaler Engineer owns the design, operation and security of the Citrix NetScaler (formerly Citrix ADC) environment, with a primary focus on the NetScaler Gateway platform that provides secure remote access to Citrix Virtual Apps and Desktops.

What you'll do

• Administer, configure and maintain NetScaler Gateway virtual servers for ICA proxy access to Citrix Virtual Apps and Desktops and Citrix Workspace.
• Integrate gateways with StoreFront and/or Citrix Cloud (Workspace), including session policies, profiles, callback URLs and Secure Ticket Authority (STA) configuration.
• Build and support authentication flows using nFactor, LDAP/LDAPS, RADIUS, SAML and multi-factor authentication providers such as Microsoft Entra ID, Okta, Duo or RSA.
• Configure and troubleshoot Endpoint Analysis (EPA) scans, SmartAccess and SmartControl policies, and client certificate authentication.
• Serve as the escalation point for remote access incidents, including login failures, STA errors, session drops, HDX/EDT performance and reconnect problems.
• Support HDX optimization through the gateway, including EDT (UDP/DTLS), Session Reliability, and audio/video for Microsoft Teams and softphone traffic.
• Manage NetScaler BLX, CPX, VPX, MPX and/or SDX appliances in high-availability pairs and clusters, including GSLB across data centers.
• Plan and execute firmware upgrades and emergency security patching, tracking vendor security bulletins and CVEs and applying fixes within defined SLAs.
• Manage SSL/TLS certificates, cipher groups and SSL profiles, and track renewals to prevent certificate-related gateway outages.
• Configure load balancing, content switching, responder and rewrite policies for StoreFront, Director and other internal services.
• Use NetScaler Console (formerly ADM), logs and packet traces such as nstrace and Wireshark for monitoring, analytics and root-cause analysis.
• Automate configuration and routine tasks with the NITRO API, PowerShell, Python, or Ansible/Terraform where practical.
• Migrate NetScalers from VMware ESXi clusters to Oracle OCI clusters.
• Harden gateway configurations against current security baselines and support vulnerability scans, penetration tests and audits.
• Follow change-management processes for all production changes, including test plans, rollback steps and post-change validation.
• Maintain current architecture diagrams, runbooks, configuration standards and disaster recovery procedures.
• Work with Citrix/VDI, Active Directory, identity, firewall, network and service desk teams, and with vendor support on escalated cases.

What you'll need

• 5+ years of hands-on experience deploying and troubleshooting NetScaler Gateway for Citrix Virtual Apps and Desktops (XenApp/XenDesktop) and StoreFront.
• Strong understanding of TCP/IP, DNS, SSL/TLS, PKI, HTTP and load-balancing concepts.
• Experience with directory and identity integration, including Active Directory, LDAP, RADIUS, SAML and MFA providers.
• Proficiency with packet-capture analysis and structured troubleshooting of authentication and connectivity issues.
• Experience with high-availability pair operations, firmware upgrades and certificate lifecycle management.
• Clear written and verbal communication skills, including the ability to explain technical issues to non-technical users.

Nice to have

• Current NetScaler or Citrix networking certification, such as Citrix Certified Associate or Professional – Networking.
• Understanding of virtualization platforms such as VMware ESXi and Oracle OCI.
• Experience with Citrix Cloud, Gateway Service, Cloud Connectors and hybrid Citrix deployments.
• Experience with NetScaler Console (ADM), GSLB and Web App Firewall (WAF).
• Scripting and automation experience with the NITRO API, PowerShell, Python, Ansible or Terraform.
• Exposure to Zero Trust or ZTNA alternatives, such as Citrix Secure Private Access, and cloud platforms such as Azure or AWS.
• Experience in a regulated environment, such as healthcare (HIPAA) or finance.

Details

• Ability to overlap 5 hours with US Central time zone hours.