Job description:

Role Description - Summary
The Mobility team, within the End User Computing division, is responsible for the delivery of mobile and wireless applications used by all Deutsche Bank staff. The team loosely follows the Spotify Agile model and is structured into delivery teams (squads) that are each accountable for a specific set of technologies.
The Senior Remote Access Engineer will be responsible for engineering and driving the development of the Remote Access infrastructure used to provide bank access for personal and corporate iOS, Windows and macOS devices in a very agile environment. He will be responsible of engineering of backlog items and interacts continuously with the product management function for backlog refinements and prioritization, always with scope to improve the user experience while staying secure.

Responsibilities/Tasks
- Develop and create the Banks Global Proxy/Remote Access Solution for over 100K users.
- Identify automation and telemetry enhancement opportunities and drive required changes and product developments.
- Stay current on the company s engineering approaches, security requirements, and best practices and apply them in a timely manner.
- Problem-management / L3 Support / vendor service relationship.
- Creating and maintaining structured documentation for all platforms in scope including technical designs, release notes, test cases, and vendor improvements.
- The engagement with other technology and security teams to ensure the platform is fit for purpose, cost effective and adheres to the engineering standards and mobile policies.


Ensuring adherence to the SDLC process and other company demanded engineering and release management practices.

Required Skills

- Excellent in-depth technical experience in the delivery of Cloud Proxy/VPN/Remote Access and cyber-security solutions which are fit for purpose in a large, regulated enterprise environment.
- Very good and in depth understanding of networking concepts and protocols including IP, routing, TLS, ActiveSync, SSL VPN, ESP, IKEv2, ICA, RDP.
- Infrastructure design experience including availability and resilience approaches, data center setups, virtualization, networks.
- Product experience on Zscaler Internet Access, Zscaler Private Access, Azure (MFA) is a must. Additional experience on Pulse Secure, CITRIX and RSA are a plus.
- SAML Based-Authentication.
- Experience to interact Application Programming Interfaces with e.g. Postman.
- Azure Active Directory / Conditional Access / DNS / DHCP / PKI certificate infrastructure.
- Proven track record in problem solving, within a medium to large enterprise environment.
- A solid understanding of Agile concepts and best practices.
- Tools knowledge of advantage JIRA, Confluence, Splunk, Fiddler, Wireshark and Service Now.
- Windows/MacOS/iOS/Linux OS skills are an advantage.
Education/Certification
Educated to bachelor s degree level or above (or overseas equivalent)
Agile or ITIL certification preferred.
Relevant network and/or security certifications preferred
Candidate will be
Hands-on person, great in communicating and documentation, super strong network engineering and agile driven mindset.
Logical, innovative, articulate, and able to work directly with technical and non-technical stakeholders.
Organized and driven to continuously improve the platform and deliver an improved user experience.
Diligent, methodical and able to constructively critique and improve designs and methods.
Can work in virtual teams spanning multiple time zones.
Keeps up to date on recent IT security incidents and threats.

• To provide support for on call escalations and doing root cause analysis of given issue
• To independently resolve tickets within agreed SLA of ticket volume and time (3