NetScaler Engineer

Key Responsibilities

Citrix Access Gateway Support (Primary Focus)

· Administer, configure, and maintain NetScaler Gateway virtual servers for ICA proxy access to Citrix Virtual Apps and Desktops and Citrix Workspace.

· Integrate gateways with StoreFront and/or Citrix Cloud (Workspace), including session policies, profiles, callback URLs, and Secure Ticket Authority (STA) configuration.

· Build and support authentication flows using nFactor, LDAP/LDAPS, RADIUS, SAML, and multi-factor authentication providers such as Microsoft Entra ID, Okta, Duo, or RSA.

· Configure and troubleshoot Endpoint Analysis (EPA) scans, SmartAccess and SmartControl policies, and client certificate authentication.

· Serve as the escalation point for remote access incidents, including login failures, STA errors, session drops, HDX/EDT performance, and reconnect problems.

· Support HDX optimization through the gateway, including EDT (UDP/DTLS), Session Reliability, and audio/video for Microsoft Teams and softphone traffic.

NetScaler Platform Operations

· Manage NetScaler BLX, CPX, VPX, MPX, and/or SDX appliances in high-availability pairs and clusters, including GSLB across data centers.

· Plan and execute firmware upgrades and emergency security patching, tracking vendor security bulletins and CVEs and applying fixes within defined SLAs.

· Manage SSL/TLS certificates, cipher groups, and SSL profiles; track renewals to prevent certificate-related gateway outages.

· Configure load balancing, content switching, responder, and rewrite policies for StoreFront, Director, and other internal services.

· Use NetScaler Console (formerly ADM), logs, and packet traces such as nstrace and Wireshark for monitoring, analytics, and root-cause analysis.

· Automate configuration and routine tasks with the NITRO API, PowerShell, Python, or Ansible/Terraform where practical.

· Migrate NetScalers from VMware ESXi clusters to Oracle OCI clusters.

Security, Change Management & Documentation

· Harden gateway configurations against current security baselines and support vulnerability scans, penetration tests, and audits.

· Follow change-management processes for all production changes, including test plans, rollback steps, and post-change validation.

· Maintain current architecture diagrams, runbooks, configuration standards, and disaster recovery procedures.

· Work with Citrix/VDI, Active Directory, identity, firewall, network, and service desk teams, and with vendor support on escalated cases.

Requirements

· 5+ years of Hands-on experience deploying and troubleshooting NetScaler Gateway for Citrix Virtual Apps and Desktops (XenApp/XenDesktop) and StoreFront.

· Strong understanding of TCP/IP, DNS, SSL/TLS, PKI, HTTP, and load-balancing concepts.

· Experience with directory and identity integration, including Active Directory, LDAP, RADIUS, SAML, and MFA providers.

· Proficiency with packet-capture analysis and structured troubleshooting of authentication and connectivity issues.

· Experience with high-availability pair operations, firmware upgrades, and certificate lifecycle management.

· Clear written and verbal communication skills, including the ability to explain technical issues to non-technical users.

· Ability to overlap 5 hours with US Central time zone hours

Preferred Qualifications

· Current NetScaler or Citrix networking certification, such as Citrix Certified Associate or Professional – Networking.

· Understanding of virtualization platforms such as VMware ESXi and Oracle OCI

· Experience with Citrix Cloud, Gateway Service, Cloud Connectors, and hybrid Citrix deployments.

· Experience with NetScaler Console (ADM), GSLB, and Web App Firewall (WAF).

· Scripting and automation experience with the NITRO API, PowerShell, Python, Ansible, or Terraform.

· Exposure to Zero Trust or ZTNA alternatives, such as Citrix Secure Private Access, and cloud platforms such as Azure or AWS.

· Experience in a regulated environment, such as healthcare (HIPAA) or finance.