Security Engineer PAM & Vault 100% (f/m/d) at BANK JULIUS BAER CO LTD

Zurich, Zurich, Switzerland -

Full Time

Start Date

Immediate

Expiry Date

14 Apr, 26

Salary

0.0

Posted On

14 Jan, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Privileged Access Management, Secrets Management, System Administration, Automation, Infrastructure-as-Code, Cloud Platforms, Cybersecurity Principles, Linux, Windows, Ansible, Terraform, Python, Bash, PowerShell, REST API, Kubernetes

Industry

Banking

Description

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together. Join our global team and play a critical role in safeguarding our digital landscape as a Security Engineer in the area of Privileged Access Management (PAM) and management of technical credentials (Vault). We're seeking a skilled expert to contribute to the ongoing projects that are introducing a new PAM (Delinea Secret Server / IBM Security Verify Privilege Manager) and Vault (Hashicorp) Solution. YOUR CHALLENGE Play a key role in the design, implementation, and operational management of Julius Baer’s next-generation Privileged Access Management (PAM) and secrets management (Vault) solutions Partner closely with global engineering and security teams to ensure high availability, resilience, and compliance of PAM and Vault infrastructures across hybrid and cloud environments Analyze evolving business and security requirements, assessing their technical feasibility, risk implications, and impact on existing systems, enterprise architecture standards, and regulatory obligations Contribute proactively to the development of secure, scalable architectures, operational concepts, and standardized engineering processes in alignment with enterprise IT strategies Maintain comprehensive, up-to-date technical documentation, including system designs, runbooks, configurations, and incident post-mortems, to ensure transparency and operational continuity Lead troubleshooting and root cause analysis for complex technical issues, driving timely resolution while minimizing service disruption Provide 2nd and 3rd level engineering support, including participation in an on-call rotation, coordinating with cross-functional teams to resolve critical incidents efficiently Drive continuous service improvement by enhancing system reliability, security posture, performance, observability, and automation, with a clear focus on increasing operational efficiency and reducing manual effort YOUR PROFILE Hands-on experience with privileged access and secrets management solutions, preferably Delinea (formerly Thycotic) Secret Server or HashiCorp Vault, including implementation, administration, and integration into enterprise systems Practical understanding of key IT security domains; experience with one or more of the following is advantageous: Secure Web Gateway technologies (e.g., Zscaler) Application delivery controllers (e.g., Citrix ADC / NetScaler) Public Key Infrastructure (PKI) Multi-factor Authentication (MFA) frameworks Minimum of 2–3 years in 2nd and 3rd line engineering or operations roles supporting enterprise-grade IT security services, ideally within complex, highly regulated environments (e.g., financial services) Technical Proficiency: Strong system administration skills across Linux and Windows platforms Demonstrated experience with automation and infrastructure-as-code, including tools such as Ansible, Terraform, Git, and scripting languages like Python, Bash, PowerShell, and REST API integrations Working knowledge of cloud platforms (AWS, Azure, or GCP), with emphasis on secure identity and access patterns Exposure to Kubernetes and containerized environments, particularly in relation to secrets injection and secure workload identity Security Fundamentals: Solid grasp of core cybersecurity principles—including authentication, authorisation, encryption, zero trust models, and least privilege access controls Education & Credentials: Relevant academic background (e.g., Bachelor’s or Master’s degree in Computer Science, Information Security, or related discipline) — or equivalent practical experience Industry certifications such as CISSP, CISM, or CEH are considered a strong asset HashiCorp Certified Vault Associate (or higher) is desirable but not mandatory Delinea Certified Technician (DCT) is desirable but not mandatory We are looking forward to receiving your full job application through our online application tool. Further interesting job opportunities can be found on our Career site. Is this not quite what you are looking for? Set up a job alert by creating a candidate account here. The international reference in wealth management Julius Baer is the leading Swiss wealth management group. We focus on servicing and advising sophisticated private clients from around the world, taking into account what truly matters to them – in their business and personal life, today and for future generations. Headquartered in Zurich, we are present in around 60 locations worldwide, including Bangkok, Dubai, Dublin, Frankfurt, Geneva, Hong Kong, London, Luxembourg, Madrid, Mexico City, Milan, Monaco, Mumbai, Santiago de Chile, Shanghai, Singapore, Tel Aviv, and Tokyo. Why join Julius Baer? At Julius Baer our employees enjoy the benefits of a global company with the support and collegiality of a much smaller one. We are growing quickly, but we remain dedicated to maintaining our accessible structure with flat hierarchies, and approachable and supportive leaders. With offices around the world, we offer an international and stimulating work environment and the opportunity to work with a diverse team of highly motivated colleagues, bringing the best of the bank to our clients. Our core values of Care, Passion, and Excellence define the tone of how we interact with each other and our partners. Committed to your success Whether nurturing young talent with our renowned apprentice scheme, enabling ambitious university graduates to put theory into practice with our Graduate Programme, or providing first-class opportunities for experienced professionals, we look after our employees. We believe in continuous learning as a company and as individuals, which is why we put a focus on the health and well-being of our employees and offer flexible working options, a wide array of benefits, and extensive career development programmes. For more information visit www.juliusbaer.com or contact us via the Contact Form. For recruiting agents, please see the additional information here.

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

The Security Engineer will design, implement, and manage PAM and Vault solutions while ensuring compliance and high availability across environments. They will also lead troubleshooting efforts and contribute to continuous service improvement.