Senior PAM and Vault Automation Engineer ; f​/m​/d

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let's shape the future of wealth management together. Julius Baer Group Ltd. acts in the sector Private Banking and is present in over 25 countries and around 60 locations. With the Headquartered in Zurich, we have offices in key locations including Bangkok, Dubai, Dublin, Frankfurt, Geneva, Hong Kong, London, Luxembourg, Madrid, Mexico City, Milan, Monaco, Mumbai, Santiago de Chile, São Paulo, Shanghai, Singapore, Tel Aviv and Tokyo.

We are looking for a highly skilled engineer to drive the automation roadmap of our Privileged Access Management (PAM) and Hashi Corp Vault platforms. The role will focus on software engineering, automation, API integrations, Infrastructure-as-Code, and platform development to increase scalability, improve security, and reduce operational effort across the organization. The successful candidate will serve as the primary engineering resource responsible for designing, developing, and maintaining automation services that integrate PAM (Delinea Secret Server), Hashi Corp Vault, IAM, CMDB, Service Management, and infrastructure platforms.

• Design, develop, and maintain automation services supporting PAM (Delinea Secret Server) and Hashi Corp Vault
• Develop enterprise-grade APIs and integration services
• Build self-service onboarding capabilities for application teams
• Implement automated secret lifecycle management
• Design and maintain account provisioning and deprovisioning workflows
• Automate privileged access governance processes
• Develop PAM and Vault integrations, automation frameworks, and reusable automation patterns
• Implement secrets rotation and certificate management workflows

• Strong software engineering background with extensive experience in Python development, object-oriented design, REST APIs, automated testing, CI/CD pipelines, code reviews, and building scalable, maintainable enterprise applications and automation platforms
• Experience designing, developing, and automating solutions around Hashi Corp Vault, enterprise PAM platforms, and Fleet Commander
• Ability to translate security and access management requirements into robust software solutions, workflows, integrations, and self-service capabilities
• Proven experience integrating complex enterprise systems through APIs, event-driven architectures, and messaging platforms
• Familiarity with Identity & Access Management (IAM), Active Directory/Entra , ITSM, CMDB, and security platforms, as well as technologies such as Kafka and microservices-based architectures
• Hands-on experience with Terraform, Ansible, Git Lab CI/CD, Git Ops practices, and automated deployment patterns
• Strong understanding of software delivery, infrastructure automation, configuration management and large-scale platform operations
• Ability to design scalable, resilient, and observable platforms, including logging, monitoring, configuration management, dependency lifecycle management, cloud-native technologies such as Kubernetes and enterprise endpoint management solutions including Fleet Commander
• Team player, strong collaborator with the willingness to take ownership
• Excellent communication skills in spoken and written form
• Strong desire to learn and develop new skills
• Highly proactive, self-driven, and focused on delivering measurable business outcomes
• Capable of independently prioritizing and resolving incidents, problems, and change requests with minimal supervision
• Strong analytical and conceptual thinking skills, with attention to detail and consideration for long-term architectural impacts
• Ability to thrive in a globally distributed team…