Senior PAM and Vault Automation Engineer 100% (f/m/d)

Bank Julius Bär & Co. Ltd.; Comunidad de Madrid; On-site; EUR 90,000 - 130,000; Full time

Job summary

Julius Baer is seeking a highly skilled software engineer to drive automation for PAM and HashiCorp Vault platforms. You will design, develop, and maintain automation services, APIs, and integration patterns, enabling self-service onboarding and secure secret lifecycle workflows.

You will work across IAM, CMDB, ITSM, and infrastructure with Terraform, Ansible, GitLab CI/CD, Kubernetes, and event-driven architectures to deliver scalable, observable platforms in a global team.

Qualifications

• Strong software engineering background with Python development and REST APIs.

Responsibilities

• Design, develop, and maintain automation services supporting PAM (Delinea Secret Server) and HashiCorp Vault.
• Develop enterprise-grade APIs and integration services.
• Build self-service onboarding capabilities for application teams.
• Implement automated secret lifecycle management and provisioning workflows.
• Automate privileged access governance processes.
• Design scalable, observable platforms with logging and monitoring.

Skills

Python

REST APIs

CI/CD

Terraform

Ansible

GitLab CI/CD

GitOps

Kubernetes

Kafka

Automation

IAM

Security

Tools

Delinea Secret Server

HashiCorp Vault

Fleet Commander

Terraform

Ansible

GitLab

Job description

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together.Julius Baer Group Ltd. acts in the sector Private Banking and is present in over 25 countries and around 60 locations. With the Headquartered in Zurich, we have offices in key locations including Bangkok, Dubai, Dublin, Frankfurt, Geneva, Hong Kong, London, Luxembourg, Madrid, Mexico City, Milan, Monaco, Mumbai,Santiago de Chile, São Paulo, Shanghai, Singapore, Tel Aviv and Tokyo.We are looking for a highly skilled engineer to drive the automation roadmap of our Privileged Access Management (PAM) and HashiCorp Vault platforms. The role will focus on software engineering, automation, API integrations, Infrastructure-as-Code, and platform development to increase scalability, improve security, and reduce operational effort across the organization.The successful candidate will serve as the primary engineering resource responsible for designing, developing, and maintaining automation services that integrate PAM (Delinea Secret Server), HashiCorp Vault, IAM, CMDB, Service Management, and infrastructure platforms.YOUR CHALLENGEDesign, develop, and maintain automation services supporting PAM (Delinea Secret Server) and HashiCorp VaultDevelop enterprise-grade APIs and integration servicesBuild self-service onboarding capabilities for application teamsImplement automated secret lifecycle managementDesign and maintain account provisioning and deprovisioning workflowsAutomate privileged access governance processesDevelop PAM and Vault integrations, automation frameworks, and reusable automation patternsImplement secrets rotation and certificate management workflowsYOUR PROFILEStrong software engineering background with extensive experience in Python development, object-oriented design, REST APIs, automated testing, CI/CD pipelines, code reviews, and building scalable, maintainable enterprise applications and automation platformsExperience designing, developing, and automating solutions around HashiCorp Vault, enterprise PAM platforms, and Fleet CommanderAbility to translate security and access management requirements into robust software solutions, workflows, integrations, and self-service capabilitiesProven experience integrating complex enterprise systems through APIs, event-driven architectures, and messaging platformsFamiliarity with Identity & Access Management (IAM), Active Directory/Entra ID, ITSM,CMDB, and security platforms, as well as technologies such as Kafka and microservices-based architecturesHands-on experience with Terraform, Ansible, GitLab CI/CD, GitOps practices, and automated deployment patternsStrong understanding of software delivery, infrastructure automation, configuration management and large-scale platform operationsAbility to design scalable, resilient, and observable platforms, including logging, monitoring, configuration management, dependency lifecycle management, cloud-native technologies such as Kubernetes and enterprise endpoint management solutions including Fleet CommanderTeam player, strong collaborator with the willingness to take ownershipExcellent communication skills in spoken and written formStrong desire to learn and develop new skillsHighly proactive, self-driven, and focused on delivering measurable business outcomesCapable of independently prioritizing and resolving incidents, problems, and change requests with minimal supervisionStrong analytical and conceptual thinking skills, with attention to detail and consideration for long-term architectural impactsAbility to thrive in a globally distributed team environmentWe are looking forward to receiving your full job application through our online application tool.