Security Architect

We are seeking an experienced Security Architect with deep expertise in Citrix Secure Private Access (SPA), Zero Trust Network Access (ZTNA), and modern secure access architectures. This role will be responsible for designing, implementing, and optimizing secure access solutions that support a hybrid workforce while enhancing security, user experience, and operational efficiency.The ideal candidate will possess strong experience in Citrix Cloud technologies, identity integrations, browser security, and enterprise access transformation initiatives, including the replacement of traditional VPN-based remote access solutions.Core ResponsibilitiesArchitecture & DesignDesign and architect end-to-end Citrix Secure Private Access (SPA) and ZTNA solutions to provide secure, scalable, and seamless access for enterprise users.Develop secure access architectures aligned with Zero Trust principles and organizational security requirements.Create high-level and low-level design documentation, implementation plans, and architecture standards.ZTNA ImplementationLead deployment and configuration of Citrix Secure Private Access (SPA) solutions across enterprise environments.Implement secure connectivity solutions for hybrid and remote workforce models.Drive migration from traditional VPN architectures to Zero Trust access frameworks.Policy Configuration & Security ControlsDefine and implement contextual access policies based on user identity, device posture, risk level, location, and application sensitivity.Configure adaptive authentication and risk-based access controls to strengthen security posture.Ensure compliance with enterprise security and governance standards.Application Onboarding & Access ManagementConfigure secure access for:SaaS applicationsWeb applicationsClient-server applicationsTCP/UDP-based applicationsManage application segmentation and least-privilege access models.Browser SecurityImplement and manage Citrix Enterprise Browser and Google Chrome Enterprise security policies.Configure isolated browsing capabilities and secure web access controls.Enhance protection against web-based threats and data leakage risks.Performance OptimizationOptimize traffic routing through Citrix Cloud Connectors and Citrix Gateway.Monitor and improve application performance, accessibility, and user experience.Ensure high availability, scalability, and resilience of secure access services.Stakeholder CollaborationPartner with security, infrastructure, networking, application, and identity teams to deliver secure access initiatives.Provide architectural guidance and technical leadership throughout project lifecycles.Support operational teams in troubleshooting and continuous improvement efforts.Mandatory Skills & ExperienceCitrix Security TechnologiesDeep expertise in:Citrix Secure Private Access (SPA)Citrix CloudCitrix GatewayCitrix Enterprise BrowserZero Trust & Network SecurityStrong understanding of:Zero Trust Architecture (ZTA)Zero Trust Network Access (ZTNA)Identity and Access Management (IAM)SASE (Secure Access Service Edge)Identity & AuthenticationHands-on experience integrating with:Microsoft Entra ID (Azure AD)OktaPing IdentityActive DirectorySecurity ProtocolsStrong knowledge of:SAMLOAuthOpenID Connect (OIDC)DNSTLS/SSLOperating Systems & TroubleshootingAdvanced troubleshooting skills across Windows environments.Experience diagnosing authentication, connectivity, policy, and application access issues.VPN ModernizationProven experience replacing legacy remote access solutions such as:Cisco VPNPulse SecureSimilar hardware/software VPN technologiesRequired / Deal Breaker SkillCitrix AppDNAHands-on experience with Citrix AppDNA is mandatory.Candidates without AppDNA implementation or assessment experience will not be considered.Preferred QualificationsBachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.Citrix certifications (CCA, CCP, CCE) preferred.Experience with enterprise browser isolation technologies.Experience with cloud security architectures across Azure, AWS, or GCP.Strong understanding of enterprise security frameworks and compliance requirements.Key SkillsCitrix Secure Private Access (SPA)Citrix CloudCitrix GatewayCitrix AppDNAZero Trust Network Access (ZTNA)IAM & SSOSASEAzure AD / Entra IDOktaPing IdentityActive DirectorySAML / OAuth / OIDCEnterprise Browser SecurityWindows TroubleshootingVPN Transformation & Modernization