IAM Security Developer

About the Role:

The IAM Security Developer provides hands-on technical development integration and engineering support for the Banks Identity and Access Management (IAM) Privileged Access Management (PAM) and Certificate Management platforms. This role is responsible for designing building testing and maintaining custom solutions across the following core platforms:

• SailPoint IdentityIQ (IIQ) Identity Governance & Administration

• Delinea Secret Server Cloud Privileged Access Management

• Keyfactor Command Certificate Lifecycle Management

• Microsoft Active Directory Certificate Services (AD CS) Public Key Infrastructure

The IAM Security Developer partners with the Identity and Access Management team Information Security Infrastructure and business stakeholders to deliver secure scalable and auditable identity solutions that support regulatory compliance (SOX GLBA FFIEC) and enterprise risk reduction.

• SailPointIdentityIQ(IIQ)

• Develop andmaintaincustom connectors rules workflows and tasks within SailPointIdentityIQto support identity lifecycle management (Joiner/Mover/Leaver).

• Build and enhance certification campaigns access request workflows policy violations and role models.

• Develop andmaintaincustom reports plugins and UI customizations usingBeanShell Java JSF and the SailPoint IIQ API/SDK.

• Configure and troubleshoot application onboarding aggregation provisioning policies and correlation rules.

• Integrate SailPoint IIQ withcorporate applications

• DelineaSecret Server Cloud

• Develop andmaintaincustom scripts integrations and automation workflows withinDelineaSecret Server Cloud for privileged credential vaulting and rotation.

• Build integrations between Secret Server and enterprise tools (e.g. SailPoint IIQ SIEM ticketing systems) using the SecretServerREST API and SDK.

• Supportthe IAM Engineers with discovery rules distributed engine configuration and high-availability architecture.

• Assistin the development of Privileged Behavior Analytics (PBA) alerting and reporting.

• KeyfactorCommand

• Build and configure integrations and connectors for automated certificate provisioning and renewal.

• Develop custom API-driven automation for certificate lifecycle events (issuance renewal revocationexpirationalerting).

• Supportcertificatestore discovery inventory management and compliance reporting across the enterprise.

• Collaborate on integration with Microsoft AD CS and Entra ID for hybrid PKI operations.

• General Engineering & Collaboration

• Write well-designed testable and secure code that adheres to coding guidelines and technical design standards.

• Create andmaintaintechnical documentation including specifications flowcharts sequence diagrams and architecture diagrams.

• Partner with QA Infrastructure and Information Security teams to drive high-quality on-time deliverables.

• Participate in peer code reviews unit testing and continuous integration/continuous deployment (CI/CD) practices.

• Contribute to operational excellence and continuous improvement initiatives across the IAM platform stack.

• Assistin promptly resolving deployment and production issues; use issue resolution as an opportunity to improve platform supportability.

• Understand and adhere to the Software Development Life Cycle (SDLC) and Bank development standards.

• Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes.

• Follows all Bank policies and procedures compliance regulations and completes all required annual or job-specific training.

• Maintain a working knowledge of Banks written policies and procedures regarding Bank Secrecy Act Regulation CC Regulation E Bank Security and other regulations as applicable to this job description.

• May be asked to coach mentor or train others and teach coursework as subject matter expert.

• Actively learns demonstrates and fosters the Columbia corporate culture in all actions and words.

• Takes personal initiative and is a positive example for others to emulate.

• Embraces our vision to become Business Bank of Choice

• May perform other duties as assigned.

About You:

• SailPoint IdentityIQ (IIQ)

• Develop and maintain custom connectors rules workflows and tasks within SailPoint IdentityIQ to support identity lifecycle management (Joiner/Mover/Leaver).

• Build and enhance certification campaigns access request workflows policy violations and role models.

• Develop and maintain custom reports plugins and UI customizations using BeanShell Java JSF and the SailPoint IIQ API/SDK.

• Configure and troubleshoot application onboarding aggregation provisioning policies and correlation rules.

• Integrate SailPoint IIQ with corporate applications

• Delinea Secret Server Cloud

• Develop and maintain custom scripts integrations and automation workflows within Delinea Secret Server Cloud for privileged credential vaulting and rotation.

• Build integrations between Secret Server and enterprise tools (e.g. SailPoint IIQ SIEM ticketing systems) using the Secret Server REST API and SDK.

• Support the IAM Engineers with discovery rules distributed engine configuration and high-availability architecture.

• Assist in the development of Privileged Behavior Analytics (PBA) alerting and reporting.

• Keyfactor Command

• Build and configure integrations and connectors for automated certificate provisioning and renewal.

• Develop custom API-driven automation for certificate lifecycle events (issuance renewal revocation expiration alerting).

• Support certificate store discovery inventory management and compliance reporting across the enterprise.

• Collaborate on integration with Microsoft AD CS and Entra ID for hybrid PKI operations.

• General Engineering & Collaboration

• Write well-designed testable and secure code that adheres to coding guidelines and technical design standards.

• Create and maintain technical documentation including specifications flowcharts sequence diagrams and architecture diagrams.

• Partner with QA Infrastructure and Information Security teams to drive high-quality on-time deliverables.

• Participate in peer code reviews unit testing and continuous integration/continuous deployment (CI/CD) practices.

• Contribute to operational excellence and continuous improvement initiatives across the IAM platform stack.

• Assist in promptly resolving deployment and production issues; use issue resolution as an opportunity to improve platform supportability.

• Understand and adhere to the Software Development Life Cycle (SDLC) and Bank development standards.

Travel Requirements

• Occasional

The pay range for this role is $70000.00 - $155000.00.

The pay rate for the selected candidate is dependent upon a variety of non-discriminatory factors including but not limited to job-related knowledge skills and experience education and geographic location. The role may be eligible for performance-based incentive compensation and those details will be provided during the recruitment process.

Primary Location: Ability to work fully onsite at posted location(s).

Our Benefits:

We are proud to offer a competitive total rewards package including base wages and comprehensive benefits.

We offer eligible associates comprehensive healthcare coverage (medical dental and vision plans) a 401(k)-retirement savings plan with employer match for qualifying associate contributions an employee assistance program life insurance disability insurance tuition assistance mental health resources identity theft protection legal support auto and home insurance pet insurance access to an online discount marketplace and paid vacation sick days volunteer days and holidays. Benefit eligibility begins the first day of the month following the date of hire for associates who are regularly scheduled to work at least thirty hours weekly.

Our Commitment to Diversity:

Columbia Bank is an equal opportunity and affirmative action employer committed to employing engaging and developing a diverse workforce. All qualified applicants will receive consideration for employment without regard to race color national origin religion sex age sexual orientation gender identity gender expression protected veteran status disability or any other applicable protected status or characteristics. If you require an accommodation to complete the application or interview(s) please let us know by email: .

To Staffing and Recruiting Agencies:

Our posted job opportunities are only intended for individuals seeking employment at Columbia Bank. Columbia Bank does not accept unsolicited resumes or applications from agencies and Columbia Bank will not be responsible for any fees related to unsolicited resume submissions. Staffing and recruiting agencies are not authorized to submit profiles applications or resumes to this site or to any Columbia Bank employee and any such submissions will be considered unsolicited unless requested directly by a member of the Talent Acquisition team.