We are seeking an experienced Security Architect with deep expertise in Citrix Secure Private Access (SPA), Zero Trust Network Access (ZTNA), and modern secure access architectures. This role will be responsible for designing, implementing, and optimizing secure access solutions that support a hybrid workforce while enhancing security, user experience, and operational efficiency.

The ideal candidate will possess solid experience in Citrix Cloud technologies, identity integrations, browser security, and enterprise access transformation initiatives, including the replacement of traditional VPN-based remote access solutions.

Core Responsibilities

Architecture & Design

- Design and architect end-to-end Citrix Secure Private Access (SPA) and ZTNA solutions to provide secure, scalable, and seamless access for enterprise users.
- Develop secure access architectures aligned with Zero Trust principles and organizational security requirements.
- Create high-level and low-level design documentation, implementation plans, and architecture standards.

ZTNA Implementation
- Lead deployment and configuration of Citrix Secure Private Access (SPA) solutions across enterprise environments.
- Implement secure connectivity solutions for hybrid and remote workforce models.
- Drive migration from traditional VPN architectures to Zero Trust access frameworks.

Policy Configuration & Security Controls
- Define and implement contextual access policies based on user identity, device posture, risk level, location, and application sensitivity.
- Configure adaptive authentication and risk-based access controls to strengthen security posture.
- Ensure compliance with enterprise security and governance standards.





Application Onboarding & Access Management
- Configure secure access for:SaaS applications
- Web applications
- Client-server applications
- TCP/UDP-based applications
- Manage application segmentation and least-privilege access models.

Browser Security
- Implement and manage Citrix Enterprise Browser and Google Chrome Enterprise security policies.
- Configure isolated browsing capabilities and secure web access controls.
- Enhance protection against web-based threats and data leakage risks.

Performance Optimization
- Optimize traffic routing through Citrix Cloud Connectors and Citrix Gateway.
- Monitor and improve application performance, accessibility, and user experience.
- Ensure high availability, scalability, and resilience of secure access services.

Stakeholder Collaboration
- Partner with security, infrastructure, networking, application, and identity teams to deliver secure access initiatives.
- Provide architectural guidance and technical leadership throughout project lifecycles.
- Support operational teams in troubleshooting and continuous improvement efforts.

Mandatory Skills & Experience

Citrix Security Technologies

- Deep expertise in:Citrix Secure Private Access (SPA)
- Citrix Cloud
- Citrix Gateway
- Citrix Enterprise Browser

Zero Trust & Network Security
- Strong understanding of:Zero Trust Architecture (ZTA)




- Zero Trust Network Access (ZTNA)
- Identity and Access Management (IAM)
- SASE (Secure Access Service Edge)

Identity & Authentication
- Hands-on experience integrating with:Microsoft Entra ID (Azure AD)
- Okta
- Ping Identity
- Active Directory

Security Protocols
- Strong knowledge of:SAML
- OAuth
- OpenID Connect (OIDC)
- DNS
- TLS/SSL

Operating Systems & Troubleshooting
- Advanced troubleshooting skills across Windows environments.
- Experience diagnosing authentication, connectivity, policy, and application access issues.

VPN Modernization
- Proven experience replacing legacy remote access solutions such as:Cisco VPN
- Pulse Secure
- Similar hardware/software VPN technologies

Required / Deal Breaker Skill

Citrix AppDNA

- Hands-on experience with Citrix AppDNA is mandatory.
- Candidates without AppDNA implementation or assessment experience will not be considered.

Preferred Qualifications
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
- Citrix certifications (CCA, CCP, CCE) preferred.
- Experience with enterprise browser isolation technologies.
- Experience with cloud security architectures across Azure, AWS, or GCP.
- Strong understanding of enterprise security frameworks and compliance requirements.

Key Skills
- Citrix Secure Private Access (SPA)
- Citrix Cloud
- Citrix Gateway
- Citrix AppDNA
- Zero Trust Network Access (ZTNA)
- IAM & SSO
- SASE
- Azure AD / Entra ID
- Okta
- Ping Identity
- Active Directory
- SAML / OAuth / OIDC
- Enterprise Browser Security
- Windows Troubleshooting
- VPN Transformation & Modernization

📌 Security Architect (Sydney)
🏢 N2S.Global
📍 Sydney