Senior PAM and Vault Automation Engineer

About the role

Julius Baer, a private banking group headquartered in Zurich with offices in Madrid among others, is looking for a highly skilled engineer to drive the automation roadmap of its Privileged Access Management (PAM) and HashiCorp Vault platforms. The role focuses on software engineering, automation, API integrations, Infrastructure-as-Code and platform development to increase scalability, improve security and reduce operational effort. The successful candidate will be the primary engineering resource for automation services integrating PAM (Delinea Secret Server), HashiCorp Vault, IAM, CMDB, service management and infrastructure platforms.

Key responsibilities

• Design, develop and maintain automation services supporting PAM (Delinea Secret Server) and HashiCorp Vault
• Build enterprise-grade APIs and integration services
• Build self-service onboarding capabilities for application teams
• Implement automated secret lifecycle management
• Design and maintain account provisioning and deprovisioning workflows
• Automate privileged access governance processes
• Develop PAM and Vault integrations, automation frameworks and reusable automation patterns
• Implement secrets rotation and certificate management workflows

Required profile

• Strong software engineering background with extensive Python development experience
• Experience designing and automating solutions around HashiCorp Vault, enterprise PAM platforms and Fleet Commander
• Ability to turn security and access management requirements into software solutions, workflows and integrations
• Proven experience integrating complex enterprise systems via APIs, event-driven architectures and messaging platforms
• Familiarity with IAM, Active Directory/Entra ID, ITSM, CMDB and security platforms, Kafka and microservices
• Hands-on experience with Terraform, Ansible, GitLab CI/CD and GitOps
• Ability to work in a globally distributed team and to resolve incidents and change requests with minimal supervision

Required skills

• Python, REST APIs, automated testing, CI/CD pipelines and code reviews
• Terraform, Ansible, GitLab CI/CD, GitOps, Kubernetes and cloud-native technologies
• Logging, monitoring, configuration management and observability