IAM Security Developer

About the Role:The IAM Security Developer provides hands-on technical development, integration, and engineering support for the Bank's Identity and Access Management (IAM), Privileged Access Management (PAM), and Certificate Management platforms. This role is responsible for designing, building, testing, and maintaining custom solutions across the following core platforms: SailPoint IdentityIQ (IIQ) — Identity Governance & Administration Delinea Secret Server Cloud — Privileged Access Management Keyfactor Command — Certificate Lifecycle Management Microsoft Active Directory Certificate Services (AD CS) — Public Key Infrastructure The IAM Security Developer partners with the Identity and Access Management team, Information Security, Infrastructure, and business stakeholders to deliver secure, scalable, and auditable identity solutions that support regulatory compliance (SOX, GLBA, FFIEC) and enterprise risk reduction. SailPoint IdentityIQ (IIQ)Develop and maintain custom connectors, rules, workflows, and tasks within SailPoint IdentityIQ to support identity lifecycle management (Joiner/Mover/Leaver). Build and enhance certification campaigns, access request workflows, policy violations, and role models. Develop and maintain custom reports, plugins, and UI customizations using BeanShell, Java, JSF, and the SailPoint IIQ API/SDK. Configure and troubleshoot application onboarding, aggregation, provisioning policies, and correlation rules. Integrate SailPoint IIQ with corporate applications Delinea Secret Server CloudDevelop and maintain custom scripts, integrations, and automation workflows within Delinea Secret Server Cloud for privileged credential vaulting and rotation. Build integrations between Secret Server and enterprise tools (e.g., SailPoint IIQ, SIEM, ticketing systems) using the Secret Server REST API and SDK. Support the IAM Engineers with discovery rules, distributed engine configuration, and high-availability architecture. Assist in the development of Privileged Behavior Analytics (PBA) alerting and reporting. Keyfactor CommandBuild and configure integrations and connectors for automated certificate provisioning and renewal. Develop custom API-driven automation for certificate lifecycle events (issuance, renewal, revocation, expiration alerting). Support certificate store discovery, inventory management, and compliance reporting across the enterprise. Collaborate on integration with Microsoft AD CS and Entra ID for hybrid PKI operations. General Engineering & CollaborationWrite well-designed, testable, and secure code that adheres to coding guidelines and technical design standards. Create and maintain technical documentation including specifications, flowcharts, sequence diagrams, and architecture diagrams. Partner with QA, Infrastructure, and Information Security teams to drive high-quality, on-time deliverables. Participate in peer code reviews, unit testing, and continuous integration/continuous deployment (CI/CD) practices. Contribute to operational excellence and continuous improvement initiatives across the IAM platform stack. Assist in promptly resolving deployment and production issues; use issue resolution as an opportunity to improve platform supportability. Understand and adhere to the Software Development Life Cycle (SDLC) and Bank development standards.Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities – knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes.Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training.Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description.May be asked to coach, mentor, or train others and teach coursework as subject matter expert.Actively learns, demonstrates, and fosters the Columbia corporate culture in all actions and words.Takes personal initiative and is a positive example for others to emulate.Embraces our vision to become “Business Bank of Choice”May perform other duties as assigned.About You:SailPoint IdentityIQ (IIQ)Develop and maintain custom connectors, rules, workflows, and tasks within SailPoint IdentityIQ to support identity lifecycle management (Joiner/Mover/Leaver).Build and enhance certification campaigns, access request workflows, policy violations, and role models.Develop and maintain custom reports, plugins, and UI customizations using BeanShell, Java, JSF, and the SailPoint IIQ API/SDK.Configure and troubleshoot application onboarding, aggregation, provisioning policies, and correlation rules.Integrate SailPoint IIQ with corporate applicationsDelinea Secret Server CloudDevelop and maintain custom scripts, integrations, and automation workflows within Delinea Secret Server Cloud for privileged credential vaulting and rotation.Build integrations between Secret Server and enterprise tools (e.g., SailPoint IIQ, SIEM, ticketing systems) using the Secret Server REST API and SDK.Support the IAM Engineers with discovery rules, distributed engine configuration, and high-availability architecture.Assist in the development of Privileged Behavior Analytics (PBA) alerting and reporting.Keyfactor CommandBuild and configure integrations and connectors for automated certificate provisioning and renewal.Develop custom API-driven automation for certificate lifecycle events (issuance, renewal, revocation, expiration alerting).Support certificate store discovery, inventory management, and compliance reporting across the enterprise.Collaborate on integration with Microsoft AD CS and Entra ID for hybrid PKI operations.General Engineering & CollaborationWrite well-designed, testable, and secure code that adheres to coding guidelines and technical design standards.Create and maintain technical documentation including specifications, flowcharts, sequence diagrams, and architecture diagrams.Partner with QA, Infrastructure, and Information Security teams to drive high-quality, on-time deliverables.Participate in peer code reviews, unit testing, and continuous integration/continuous deployment (CI/CD) practices.Contribute to operational excellence and continuous improvement initiatives across the IAM platform stack.Assist in promptly resolving deployment and production issues; use issue resolution as an opportunity to improve platform supportability.Understand and adhere to the Software Development Life Cycle (SDLC) and Bank development standards.Travel RequirementsOccasionalThe pay range for this role is $70,000.00 - $155,000.00.The pay rate for the selected candidate is dependent upon a variety of non-discriminatory factors including, but not limited to, job-related knowledge, skills, and experience, education, and geographic location. The role may be eligible for performance-based incentive compensation, and those details will be provided during the recruitment process.Primary Location: Ability to work fully onsite at posted location(s).9285 NE Tanasbourne Drive Hillsboro OR 97124Our Benefits:We are proud to offer a competitive total rewards package including base wages and comprehensive benefits.We offer eligible associates comprehensive healthcare coverage (medical, dental, and vision plans), a 401(k)-retirement savings plan with employer match for qualifying associate contributions, an employee assistance program, life insurance, disability insurance, tuition assistance, mental health resources, identity theft protection, legal support, auto and home insurance, pet insurance, access to an online discount marketplace, and paid vacation, sick days, volunteer days, and holidays. Benefit eligibility begins the first day of the month following the date of hire for associates who are regularly scheduled to work at least thirty hours weekly.Our Commitment to Diversity:Columbia Bank is an equal opportunity and affirmative action employer committed to employing, engaging, and developing a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, age, sexual orientation, gender identity, gender expression, protected veteran status, disability, or any other applicable protected status or characteristics. If you require an accommodation to complete the application or interview(s), please let us know by email: View email address on click.appcast.io Staffing and Recruiting Agencies: Our posted job opportunities are only intended for individuals seeking employment at Columbia Bank. Columbia Bank does not accept unsolicited resumes or applications from agencies and Columbia Bank will not be responsible for any fees related to unsolicited resume submissions. Staffing and recruiting agencies are not authorized to submit profiles, applications, or resumes to this site or to any Columbia Bank employee and any such submissions will be considered unsolicited unless requested directly by a member of the Talent Acquisition team.SummaryLocation: Hillsboro, Oregon; Lake Oswego, Oregon; Bellevue, Washington; Los Angeles, California; Las Vegas, Nevada; Lakewood, Washington; Seattle, Washington; Denver, Colorado; Portland, Oregon; Phoenix, Arizona; Dallas, TX; Colorado Springs, Colorado; Tacoma, Washington; Irvine, California; Liberty Lake, WashingtonType: Full time