We are seeking an experienced Security Architect with deep expertise in Citrix Secure Private Access (SPA), Zero Trust Network Access (ZTNA), and modern secure access architectures . This role will be responsible for designing, implementing, and optimizing secure access solutions that support a hybrid workforce while enhancing security, user experience, and operational efficiency.

Core Responsibilities

- Design and architect end-to-end Citrix Secure Private Access (SPA) and ZTNA solutions to provide secure, scalable, and seamless access for enterprise users.
- Develop secure access architectures aligned with Zero Trust principles and organizational security requirements.
- Create high-level and low-level design documentation, implementation plans, and architecture standards.

ZTNA Implementation

- Lead deployment and configuration of Citrix Secure Private Access (SPA) solutions across enterprise environments.
- Implement secure connectivity solutions for hybrid and remote workforce models.
- Drive migration from traditional VPN architectures to Zero Trust access frameworks.

Policy Configuration & Security Controls

- Define and implement contextual access policies based on user identity, device posture, risk level, location, and application sensitivity.
- Configure adaptive authentication and risk-based access controls to strengthen security posture.
- Ensure compliance with enterprise security and governance standards.

Application Onboarding & Access Management

- Configure secure access for:SaaS applications
- Web applications
- Client-server applications
- TCP/UDP-based applications
- Manage application segmentation and least-privilege access models.
- Configure isolated browsing capabilities and secure web access controls.
- Enhance protection against web-based threats and data leakage risks.

Performance Optimization

- Optimize traffic routing through Citrix Cloud Connectors and Citrix Gateway .




- Monitor and improve application performance, accessibility, and user experience.
- Ensure high availability, scalability, and resilience of secure access services.

Stakeholder Collaboration

- Partner with security, infrastructure, networking, application, and identity teams to deliver secure access initiatives.
- Provide architectural guidance and technical leadership throughout project lifecycles.
- Support operational teams in troubleshooting and continuous improvement efforts.

Mandatory Skills & Experience

Citrix Security Technologies

- Deep expertise in:Citrix Secure Private Access (SPA)
- Citrix Cloud
- Citrix Gateway

Zero Trust & Network Security

- Solid understanding of:Zero Trust Architecture (ZTA)
- Zero Trust Network Access (ZTNA)
- Identity and Access Management (IAM)
- SASE (Secure Access Service Edge)

Identity & Authentication

- Hands-on experience integrating with:Microsoft Entra ID (Azure AD)
- Okta
- Ping Identity
- Active Directory

Security Protocols

- Strong knowledge of:SAML
- OAuth
- OpenID Connect (OIDC)
- DNS
- TLS/SSL

Operating Systems & Troubleshooting

- Advanced troubleshooting skills across Windows environments.
- Experience diagnosing authentication, connectivity, policy, and application access issues.

VPN Modernization

- Proven experience replacing legacy remote access solutions such as:Cisco VPN
- Pulse Secure
- Similar hardware/software VPN technologies

Required / Deal Breaker Skill

Citrix AppDNA

- Hands-on experience with Citrix AppDNA is mandatory.
- Candidates without AppDNA implementation or assessment experience will not be considered.

Preferred Qualifications

- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
- Citrix certifications (CCA, CCP, CCE) preferred.
- Experience with cloud security architectures across Azure, AWS, or GCP.
- Strong understanding of enterprise security frameworks and compliance requirements.

#J-18808-Ljbffr

📌 Security Architect (Sydney)
🏢 N2S.Global
📍 Sydney