Senior PAM and Vault Automation Engineer 100% (f/m/d)

Description

The company is a private bank with offices in more than 25 countries and about 60 locations, headquartered in Zurich. Offices include Bangkok, Dubai, Dublin, Frankfurt, Geneva, Hong Kong, London, Luxembourg, Madrid, Mexico City, Milan, Monaco, Mumbai, Santiago de Chile, São Paulo, Shanghai, Singapore, Tel Aviv and Tokyo.

The team is looking for a senior engineer to lead the automation roadmap for its Privileged Access Management (PAM) and HashiCorp Vault platforms. The work centres on software engineering, automation, API integrations, Infrastructure-as-Code and platform development, with the goal of improving scalability and security and reducing operational effort across the organization.

You will be the main engineering resource for designing, building and maintaining automation services that connect PAM (Delinea Secret Server), HashiCorp Vault, IAM, CMDB, service management and infrastructure platforms.

Responsibilities

• Design, build and maintain automation services for Delinea Secret Server and HashiCorp Vault.
• Build enterprise-grade APIs and integration services.
• Create self-service onboarding for application teams.
• Automate the full lifecycle of secrets, including rotation and certificate management workflows.
• Design and maintain account provisioning and deprovisioning workflows.
• Automate privileged access governance processes.
• Develop PAM and Vault integrations, automation frameworks and reusable patterns.

Requirements

• Solid software engineering background, with extensive Python experience, object-oriented design, REST APIs, automated testing, CI/CD pipelines and code reviews, and experience building scalable, maintainable enterprise applications and automation platforms.
• Experience designing, developing and automating solutions around HashiCorp Vault, enterprise PAM platforms and Fleet Commander.
• Ability to turn security and access requirements into robust software, workflows, integrations and self-service tools.
• Proven experience integrating complex enterprise systems through APIs, event-driven architectures and messaging platforms.
• Familiarity with Identity & Access Management (IAM), Active Directory or Entra ID, ITSM, CMDB and security platforms, plus Kafka and microservices architectures.
• Hands-on experience with Terraform, Ansible, GitLab CI/CD, GitOps and automated deployment patterns.
• Strong grasp of software delivery, infrastructure automation, configuration management and large-scale platform operations.
• Ability to design scalable, resilient and observable platforms, covering logging, monitoring, configuration management, dependency lifecycle management, cloud-native technology such as Kubernetes, and endpoint management including Fleet Commander.
• Team player who collaborates well and is willing to take ownership.
• Excellent spoken and written communication.
• Eagerness to learn and grow new skills.
• Proactive and self-driven, focused on measurable business results.
• Able to prioritise and resolve incidents, problems and change requests largely on your own.
• Strong analytical and conceptual thinking, with attention to detail and to long-term architecture effects.
• Able to work effectively in a globally distributed team.

Conditions

This is a 100% position (f/m/d).