IAM Security Developer

Columbia Bank; Hillsboro (OR); On-site; USD 70,000 - 155,000; Full time

Benefits offered by this job

Healthcare coverage

401(k) with employer match

Paid vacation & holidays

Employee assistance program

Life insurance

Job summary

Columbia Bank in Hillsboro, OR is seeking an IAM Security Developer to design, build, and maintain secure identity solutions across SailPoint IIQ, Delinea Secret Server Cloud, Keyfactor Command, and AD CS. This role partners with IAM, InfoSec, and Infrastructure to ensure compliant, auditable identity governance and privileged access.

You will implement connectors, workflows, and automation, participate in CI/CD, and contribute to regulatory controls like SOX, GLBA, and FFIEC.

Qualifications

• Experience implementing identity lifecycle management (Joiner/Mover/Leaver) in enterprise environments.
• Knowledge of IAM, PAM, and certificate lifecycle workflows and policies.
• Hands-on development, integration, and automation experience across IAM platforms.

Responsibilities

• Develop and maintain connectors, rules, workflows, and tasks in SailPoint IIQ.
• Create and optimize certification campaigns, access requests, and role models.
• Build integrations between SailPoint IIQ, Delinea Secret Server Cloud, and Keyfactor Command.
• Write secure code and maintain documentation including diagrams and specifications.
• Collaborate with QA, Infra, and InfoSec to deliver high-quality, on-time results.

Skills

SailPoint IIQ

Delinea Secret Server Cloud

Keyfactor Command

AD CS

Java

Tools

BeanShell

JSF

SailPoint IIQ API/SDK

REST API

Job description

About The Role

The IAM Security Developer provides hands‑on technical development, integration, and engineering support for the Bank's Identity and Access Management (IAM), Privileged Access Management (PAM), and Certificate Management platforms. This role is responsible for designing, building, testing, and maintaining custom solutions across the following core platforms:

• SailPoint IdentityIQ (IIQ) — Identity Governance & Administration
• Delinea Secret Server Cloud — Privileged Access Management
• Keyfactor Command — Certificate Lifecycle Management
• Microsoft Active Directory Certificate Services (AD CS) — Public Key Infrastructure

About The Role

The IAM Security Developer provides hands‑on technical development, integration, and engineering support for the Bank's Identity and Access Management (IAM), Privileged Access Management (PAM), and Certificate Management platforms. This role is responsible for designing, building, testing, and maintaining custom solutions across the following core platforms:

• SailPoint IdentityIQ (IIQ) — Identity Governance & Administration
• Delinea Secret Server Cloud — Privileged Access Management
• Keyfactor Command — Certificate Lifecycle Management
• Microsoft Active Directory Certificate Services (AD CS) — Public Key Infrastructure

The IAM Security Developer partners with the Identity and Access Management team, Information Security, Infrastructure, and business stakeholders to deliver secure, scalable, and auditable identity solutions that support regulatory compliance (SOX, GLBA, FFIEC) and enterprise risk reduction.

• SailPoint IdentityIQ (IIQ)
• Develop and maintain custom connectors, rules, workflows, and tasks within SailPoint IdentityIQ to support identity lifecycle management (Joiner/Mover/Leaver).
• Build and enhance certification campaigns, access request workflows, policy violations, and role models.
• Develop and maintain custom reports, plugins, and UI customizations using BeanShell, Java, JSF, and the SailPoint IIQ API/SDK.
• Configure and troubleshoot application onboarding, aggregation, provisioning policies, and correlation rules.
• Integrate SailPoint IIQ with corporate applications
• Delinea Secret Server Cloud
• Develop and maintain custom scripts, integrations, and automation workflows within Delinea Secret Server Cloud for privileged credential vaulting and rotation.
• Build integrations between Secret Server and enterprise tools (e.g., SailPoint IIQ, SIEM, ticketing systems) using the Secret Server REST API and SDK.
• Support the IAM Engineers with discovery rules, distributed engine configuration, and high-availability architecture.
• Assist in the development of Privileged Behavior Analytics (PBA) alerting and reporting.
• Keyfactor Command
• Build and configure integrations and connectors for automated certificate provisioning and renewal.
• Develop custom API-driven automation for certificate lifecycle events (issuance, renewal, revocation, expiration alerting).
• Support certificate store discovery, inventory management, and compliance reporting across the enterprise.
• Collaborate on integration with Microsoft AD CS and Entra ID for hybrid PKI operations.
• General Engineering & Collaboration
• Write well-designed, testable, and secure code that adheres to coding guidelines and technical design standards.
• Create and maintain technical documentation including specifications, flowcharts, sequence diagrams, and architecture diagrams.
• Partner with QA, Infrastructure, and Information Security teams to drive high-quality, on-time deliverables.
• Participate in peer code reviews, unit testing, and continuous integration/continuous deployment (CI/CD) practices.
• Contribute to operational excellence and continuous improvement initiatives across the IAM platform stack.
• Assist in promptly resolving deployment and production issues; use issue resolution as an opportunity to improve platform supportability.
• Understand and adhere to the Software Development Life Cycle (SDLC) and Bank development standards.
• Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities – knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes.
• Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training.
• Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description.
• May be asked to coach, mentor, or train others and teach coursework as subject matter expert.
• Actively learns, demonstrates, and fosters the Columbia corporate culture in all actions and words.
• Takes personal initiative and is a positive example for others to emulate.
• Embraces our vision to become "Business Bank of Choice"
• May perform other duties as assigned.

About You

• SailPoint IdentityIQ (IIQ)
• Develop and maintain custom connectors, rules, workflows, and tasks within SailPoint IdentityIQ to support identity lifecycle management (Joiner/Mover/Leaver).
• Build and enhance certification campaigns, access request workflows, policy violations, and role models.
• Develop and maintain custom reports, plugins, and UI customizations using BeanShell, Java, JSF, and the SailPoint IIQ API/SDK.
• Configure and troubleshoot application onboarding, aggregation, provisioning policies, and correlation rules.
• Integrate SailPoint IIQ with corporate applications
• Delinea Secret Server Cloud
• Develop and maintain custom scripts, integrations, and automation workflows within Delinea Secret Server Cloud for privileged credential vaulting and rotation.
• Build integrations between Secret Server and enterprise tools (e.g., SailPoint IIQ, SIEM, ticketing systems) using the Secret Server REST API and SDK.
• Support the IAM Engineers with discovery rules, distributed engine configuration, and high-availability architecture.
• Assist in the development of Privileged Behavior Analytics (PBA) alerting and reporting.
• Keyfactor Command
• Build and configure integrations and connectors for automated certificate provisioning and renewal.
• Develop custom API-driven automation for certificate lifecycle events (issuance, renewal, revocation, expiration alerting).
• Support certificate store discovery, inventory management, and compliance reporting across the enterprise.
• Collaborate on integration with Microsoft AD CS and Entra ID for hybrid PKI operations.
• General Engineering & Collaboration
• Write well-designed, testable, and secure code that adheres to coding guidelines and technical design standards.
• Create and maintain technical documentation including specifications, flowcharts, sequence diagrams, and architecture diagrams.
• Partner with QA, Infrastructure, and Information Security teams to drive high-quality, on-time deliverables.
• Participate in peer code reviews, unit testing, and continuous integration/continuous deployment (CI/CD) practices.
• Contribute to operational excellence and continuous improvement initiatives across the IAM platform stack.
• Assist in promptly resolving deployment and production issues; use issue resolution as an opportunity to improve platform supportability.
• Understand and adhere to the Software Development Life Cycle (SDLC) and Bank development standards.

Travel Requirements

• Occasional

The pay range for this role is $70,000.00 - $155,000.00.

The pay rate for the selected candidate is dependent upon a variety of non-discriminatory factors including, but not limited to, job-related knowledge, skills, and experience, education, and geographic location. The role may be eligible for performance-based incentive compensation, and those details will be provided during the recruitment process.

Primary Location: Ability to work fully onsite at posted location(s).

9285 NE Tanasbourne Drive Hillsboro OR 97124

Our Benefits

• comprehensive healthcare coverage (medical, dental, and vision plans)
• a 401(k)-retirement savings plan with employer match for qualifying associate contributions
• an employee assistance program
• life insurance
• disability insurance
• tuition assistance
• mental health resources
• identity theft protection
• legal support
• auto and home insurance
• pet insurance
• access to an online discount marketplace
• paid vacation, sick days, volunteer days, and holidays

Benefit eligibility begins the first day of the month following the date of hire for associates who are regularly scheduled to work at least thirty hours weekly.

Our Commitment To Diversity

Columbia Bank is an equal opportunity and affirmative action employer committed to employing, engaging, and developing a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, age, sexual orientation, gender identity, gender expression, protected veteran status, disability, or any other applicable protected status or characteristics. If you require an accommodation to complete the application or interview(s), please let us know by email: [e-mail].

To Staffing And Recruiting Agencies

Our posted job opportunities are only intended for individuals seeking employment at Columbia Bank. Columbia Bank does not accept unsolicited resumes or applications from agencies and Columbia Bank will not be responsible for any fees related to unsolicited resume submissions. Staffing and recruiting agencies are not authorized to submit profiles, applications, or resumes to this site or to any Columbia Bank employee and any such submissions will be considered unsolicited unless requested directly by a member of the Talent Acquisition team.