Senior PAM and Vault Automation Engineer 100% (f/m/d)

Julius Baer; Madrid; On-site; EUR 70,000 - 110,000; Full time

Job summary

Julius Baer in Madrid is seeking a skilled software engineer to drive automation across Privileged Access Management (PAM) and HashiCorp Vault platforms. The role emphasizes software engineering, automation, API integrations, Infrastructure-as-Code, and platform development to boost scalability, security, and reduce operational effort.

The candidate will design, develop, and maintain automation services integrating PAM, Vault, IAM, CMDB, Service Management, and infrastructure platforms, enabling

Qualifications

• Requires strong software engineering background with Python and API focus.
• Experience designing, developing, and automating enterprise-scale platforms.
• Solid knowledge of IAM, security platforms, and integration patterns.

Responsibilities

• Design, develop, and maintain automation services for PAM and Vault.
• Build enterprise APIs and integration services.
• Create self-service onboarding capabilities for application teams.
• Implement automated secret lifecycle management and rotation workflows.
• Design account provisioning/deprovisioning workflows and governance processes.
• Develop PAM and Vault integrations, automation frameworks, and reusable patterns.

Skills

Python development

REST APIs

CI/CD pipelines

Automated testing

OO design

Tools

HashiCorp Vault

Delinea Secret Server

Terraform

Ansible

GitLab CI/CD

Fleet Commander

Job description

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together.

Julius Baer Group Ltd. acts in the sector Private Banking and is present in over 25 countries and around 60 locations. With the Headquartered in Zurich, we have offices in key locations including Bangkok, Dubai, Dublin, Frankfurt, Geneva, Hong Kong, London, Luxembourg, Madrid, Mexico City, Milan, Monaco, Mumbai, Santiago de Chile, São Paulo, Shanghai, Singapore, Tel Aviv and Tokyo.

We are looking for a highly skilled engineer to drive the automation roadmap of our Privileged Access Management (PAM) and HashiCorp Vault platforms. The role will focus on software engineering, automation, API integrations, Infrastructure-as-Code, and platform development to increase scalability, improve security, and reduce operational effort across the organization.

The successful candidate will serve as the primary engineering resource responsible for designing, developing, and maintaining automation services that integrate PAM (Delinea Secret Server), HashiCorp Vault, IAM, CMDB, Service Management, and infrastructure platforms.

YOUR CHALLENGE

• Design, develop, and maintain automation services supporting PAM (Delinea Secret Server) and HashiCorp Vault
• Develop enterprise-grade APIs and integration services
• Build self-service onboarding capabilities for application teams
• Implement automated secret lifecycle management
• Design and maintain account provisioning and deprovisioning workflows
• Automate privileged access governance processes
• Develop PAM and Vault integrations, automation frameworks, and reusable automation patterns
• Implement secrets rotation and certificate management workflows

YOUR PROFILE

• Strong software engineering background with extensive experience in Python development, object‑oriented design, REST APIs, automated testing, CI/CD pipelines, code reviews, and building scalable, maintainable enterprise applications and automation platforms
• Experience designing, developing, and automating solutions around HashiCorp Vault, enterprise PAM platforms, and Fleet Commander
• Ability to translate security and access management requirements into robust software solutions, workflows, integrations, and self-service capabilities
• Proven experience integrating complex enterprise systems through APIs, event‑driven architectures, and messaging platforms
• Familiarity with Identity & Access Management (IAM), Active Directory/Entra ID, ITSM,CMDB, and security platforms, as well as technologies such as Kafka and microservices‑based architectures
• Hands‑on experience with Terraform, Ansible, GitLab CI/CD, GitOps practices, and automated deployment patterns
• Strong understanding of software delivery, infrastructure automation, configuration management and large‑scale platform operations
• Ability to design scalable, resilient, and observable platforms, including logging, monitoring, configuration management, dependency lifecycle management, cloud‑native technologies such as Kubernetes and enterprise endpoint management solutions including Fleet Commander
• Team player, strong collaborator with the willingness to take ownership
• Excellent communication skills in spoken and written form
• Strong desire to learn and develop new skills
• Highly proactive, self‑driven, and focused on delivering measurable business outcomes
• Capable of independently prioritizing and resolving incidents, problems, and change requests with minimal supervision
• Strong analytical and conceptual thinking skills, with attention to detail and consideration for long‑term architectural impacts
• Ability to thrive in a globally distributed team environment