Senior PAM and Vault Automation Engineer 100% (f/m/d)

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together.

Julius Baer Group Ltd. acts in the sector Private Banking and is present in over 25 countries and around 60 locations. With the Headquartered in Zurich, we have offices in key locations including Bangkok, Dubai, Dublin, Frankfurt, Geneva, Hong Kong, London, Luxembourg, Madrid, Mexico City, Milan, Monaco, Mumbai,
Santiago de Chile, São Paulo, Shanghai, Singapore, Tel Aviv and Tokyo.
We are looking for a highly skilled engineer to drive the automation roadmap of our Privileged Access Management (PAM) and HashiCorp Vault platforms. The role will focus on software engineering, automation, API integrations, Infrastructure-as-Code, and platform development to increase scalability, improve security, and reduce operational effort across the organization.
The successful candidate will serve as the primary engineering resource responsible for designing, developing, and maintaining automation services that integrate PAM (Delinea Secret Server), HashiCorp Vault, IAM, CMDB, Service Management, and infrastructure platforms.

YOUR CHALLENGE

• Design, develop, and maintain automation services supporting PAM (Delinea Secret Server) and HashiCorp Vault
• Develop enterprise-grade APIs and integration services
• Build self-service onboarding capabilities for application teams
• Implement automated secret lifecycle management
• Design and maintain account provisioning and deprovisioning workflows
• Automate privileged access governance processes
• Develop PAM and Vault integrations, automation frameworks, and reusable automation patterns
• Implement secrets rotation and certificate management workflows

YOUR PROFILE

• Strong software engineering background with extensive experience in Python development, object-oriented design, REST APIs, automated testing, CI/CD pipelines, code reviews, and building scalable, maintainable enterprise applications and automation platforms
• Experience designing, developing, and automating solutions around HashiCorp Vault, enterprise PAM platforms, and Fleet Commander
• Ability to translate security and access management requirements into robust software solutions, workflows, integrations, and self-service capabilities
• Proven experience integrating complex enterprise systems through APIs, event-driven architectures, and messaging platforms
• Familiarity with Identity & Access Management (IAM), Active Directory/Entra ID, ITSM,CMDB, and security platforms, as well as technologies such as Kafka and microservices-based architectures
• Hands-on experience with Terraform, Ansible, GitLab CI/CD, GitOps practices, and automated deployment patterns
• Strong understanding of software delivery, infrastructure automation, configuration management and large-scale platform operations
• Ability to design scalable, resilient, and observable platforms, including logging, monitoring, configuration management, dependency lifecycle management, cloud-native technologies such as Kubernetes and enterprise endpoint management solutions including Fleet Commander
• Team player, strong collaborator with the willingness to take ownership
• Excellent communication skills in spoken and written form
• Strong desire to learn and develop new skills
• Highly proactive, self-driven, and focused on delivering measurable business outcomes
• Capable of independently prioritizing and resolving incidents, problems, and change requests with minimal supervision
• Strong analytical and conceptual thinking skills, with attention to detail and consideration for long-term architectural impacts
• Ability to thrive in a globally distributed team environment

We are looking forward to receiving your full job application through our online application tool. Further interesting job opportunities can be found on our Career site.

Is this not quite what you are looking for? Set up a job alert by creating a candidate account here.