Role Summary
Specialist infrastructure role ensuring the Citrix-hosted Kofax estate can reach everything it needs, securely and
verifiably: firewall flow specification and validation across three protocols, SQL and NAS access from the VDA servers,TLS enforcement, and centralized logging. You produce the specifications the client's network team executes, then prove the paths work - the workstream's hardest gate sits in your second week.Key Responsibilities Design and document required network flows: Kofax Application Server (TCP 2424), SQL Server browser (UDP1434), and NAS storage (SMB) from the VDA estate Prepare firewall change specifications for client network-team execution; track the changes through the client's change process and validate each path post-implementation Validate SQL Server interaction and NAS share access/permissions from the VDA servers; resolve authentication and permission issues with client DBA and storage teams Enforce TLS 1.2 where applicable across the connection paths; document certificate requirements Integrate the VDA estate into centralized logging; verify log flow before cutover Provide on-call infrastructure defect support through UAT and cutover Required Skills & Experience 10+ years infrastructure engineering across Windows Server, enterprise networking, and storage Strong firewall/network troubleshooting: specifying rules for third-party execution and proving connectivity across TCP, UDP, and SMB (packet capture, port testing) SQL Server connectivity fundamentals (browser service, named instances, authentication modes) and NAS/SMBshare permission models (NTFS + share ACLs) TLS certificate handling and enterprise logging/SIEM forwarding (Splunk or equivalent) Experience working through a client-side change process where you specify and verify but do not directly executenetwork changes Nice to Have3 Citrix VDA environment familiarity (enough to collaborate fluently with the Citrix engineer) Exposure to document-capture or imaging platform infrastructure Financial-services or insurance infrastructure delivery background
