Remote Access Lead Infrastructure Engineer

Job summary

Lead the design, engineering, and lifecycle of secure remote access infrastructure delivering virtual desktops and applications to a global workforce across a multi-region data center footprint. Set architecture and configuration standards, engineer capacity and failover, harden externally reachable services, and automate build and validation while coordinating with network, identity, security, and data center teams. The environment includes Citrix NetScaler, Omnissa Horizon, TLS, SAML, and automation using PowerShell, Python, or Terraform.

Benefits

Qualifications

• Formal training or certification in infrastructure engineering concepts and at least 5 years of applied experience.
• Experience engineering enterprise remote access, application delivery, or virtual desktop infrastructure at global scale in a regulated environment.
• Hands-on expertise with application delivery controllers and access gateways, including multi-tenant provisioning, load balancing, virtual server configuration, TLS profiles, certificate lifecycle, authentication policies, and session settings.
• Experience designing enterprise virtual desktop platforms, including broker and connection server design, pod and image architecture, and protocol-level session delivery.
• Knowledge of enterprise networking and identity integration, including DNS, routing, firewall policy, TLS, SAML federation, multi-factor authentication, and directory services.
• Experience in capacity planning, load testing, and resiliency engineering for high-concurrency platforms, with automation in PowerShell, Python, Terraform, or equivalent.
• Experience with Cloudflare or Akamai.
• Knowledge of infrastructure engineering domains such as hardware, networking, databases, storage, deployment, integration, automation, scaling, resilience, or performance assessment.
• Experience using authorized enterprise AI capabilities in infrastructure workflows, with strong validation practices and awareness of data sensitivity.
• Ability to review AI-assisted recommendations and ensure implementation meets resiliency, security, and auditability expectations.
• Knowledge of cloud infrastructure and multiple cloud technologies, with ability to operate in and migrate across public and private clouds.
• Preferred: Experience with zero-trust network access or cloud-delivered access services, including identity-aware proxies and outbound connectors.
• Preferred: Experience reducing the internet-facing attack surface of enterprise services without degrading user experience.
• Preferred: Familiarity with thin client platforms and diverse managed and unmanaged endpoints.
• Preferred: Hands-on experience with appliance hardware refresh and firmware lifecycle in co-located data centers.

Responsibilities

• Own the design, build, and lifecycle of global remote access infrastructure, including application delivery controllers, access gateways, virtual desktop brokers and pods, and supporting network and certificate services.
• Define reference architecture and configuration standards across regions; retire one-off builds and legacy exceptions.
• Engineer capacity, regional resiliency, recovery, traffic distribution, and load testing for peak and contingency concurrency.
• Harden externally reachable access services through TLS configuration, federation and multi-factor integration, device posture enforcement, remediation, and integrity monitoring.
• Automate infrastructure builds, configuration, and post-change validation.
• Coordinate engineering across network, identity, security, and data center operations teams.
• Use authorized AI capabilities to support infrastructure analysis and documentation, validating outputs and protecting sensitive operational data.

Skills

Industry

Relocation