IAM Security Developer

The IAM Security Developer provides hands-on technical development, integration, and engineering support for the Bank's Identity and Access Management (IAM), Privileged Access Management (PAM), and Certificate Management platforms. This role is responsible for designing, building, testing, and maintaining custom solutions across the following core platforms:

- SailPoint IdentityIQ (IIQ) - Identity Governance & Administration

- Delinea Secret Server Cloud - Privileged Access Management

- Microsoft Active Directory Certificate Services (AD CS) - Public Key Infrastructure

The IAM Security Developer partners with the Identity and Access Management team, Information Security, Infrastructure, and business stakeholders to deliver secure, scalable, and auditable identity solutions that support regulatory compliance (SOX, GLBA, FFIEC) and enterprise risk reduction.

- Develop and maintain custom connectors, rules, workflows, and tasks within SailPoint IdentityIQ to support identity lifecycle management (Joiner/Mover/Leaver).

- Build and enhance certification campaigns, access request workflows, policy violations, and role models.

- Develop and maintain custom reports, plugins, and UI customizations using BeanShell, Java, JSF, and the SailPoint IIQ API/SDK.

- Configure and troubleshoot application onboarding, aggregation, provisioning policies, and correlation rules.

- Develop and maintain custom scripts, integrations, and automation workflows within Delinea Secret Server Cloud for privileged credential vaulting and rotation.

- Build integrations between Secret Server and enterprise tools (e.g., SailPoint IIQ, SIEM, ticketing systems) using the Secret Server REST API and SDK.

- Support the IAM Engineers with discovery rules, distributed engine configuration, and high-availability architecture.

- Assist in the development of Privileged Behavior Analytics (PBA) alerting and reporting.

- Build and configure integrations and connectors for automated certificate provisioning and renewal.

- Develop custom API-driven automation for certificate lifecycle events (issuance, renewal, revocation, expiration alerting).

- Support certificate store discovery, inventory management, and compliance reporting across the enterprise.

- Collaborate on integration with Microsoft AD CS and Entra ID for hybrid PKI operations.

- Write well-designed, testable, and secure code that adheres to coding guidelines and technical design standards.

- Create and maintain technical documentation including specifications, flowcharts, sequence diagrams, and architecture diagrams.

- Partner with QA, Infrastructure, and Information Security teams to drive high-quality, on-time deliverables.

- Participate in peer code reviews, unit testing, and continuous integration/continuous deployment (CI/CD) practices.

- Contribute to operational excellence and continuous improvement initiatives across the IAM platform stack.

- Assist in promptly resolving deployment and production issues; use issue resolution as an opportunity to improve platform supportability.

- Understand and adhere to the Software Development Life Cycle (SDLC) and Bank development standards.

- Demonstrates compliance with all bank regulations for assigned job function and applies to designated job

responsibilities - knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes.

- Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description.

- May be asked to coach, mentor, or train others and teach coursework as subject matter expert.

- Develop and maintain custom connectors, rules, workflows, and tasks within SailPoint IdentityIQ to support identity lifecycle management (Joiner/Mover/Leaver).

- Build and enhance certification campaigns, access request workflows, policy violations, and role models.

- Develop and maintain custom reports, plugins, and UI customizations using BeanShell, Java, JSF, and the SailPoint IIQ API/SDK.

- Configure and troubleshoot application onboarding, aggregation, provisioning policies, and correlation rules.

- Develop and maintain custom scripts, integrations, and automation workflows within Delinea Secret Server Cloud for privileged credential vaulting and rotation.

- Build integrations between Secret Server and enterprise tools (e.g., SailPoint IIQ, SIEM, ticketing systems) using the Secret Server REST API and SDK.

- Support the IAM Engineers with discovery rules, distributed engine configuration, and high-availability architecture.

- Assist in the development of Privileged Behavior Analytics (PBA) alerting and reporting.

- Build and configure integrations and connectors for automated certificate provisioning and renewal.

- Develop custom API-driven automation for certificate lifecycle events (issuance, renewal, revocation, expiration alerting).

- Support certificate store discovery, inventory management, and compliance reporting across the enterprise.

- Collaborate on integration with Microsoft AD CS and Entra ID for hybrid PKI operations.

- Write well-designed, testable, and secure code that adheres to coding guidelines and technical design standards.

- Create and maintain technical documentation including specifications, flowcharts, sequence diagrams, and architecture diagrams.

- Partner with QA, Infrastructure, and Information Security teams to drive high-quality, on-time deliverables.

- Participate in peer code reviews, unit testing, and continuous integration/continuous deployment (CI/CD) practices.

- Contribute to operational excellence and continuous improvement initiatives across the IAM platform stack.

- Assist in promptly resolving deployment and production issues; use issue resolution as an opportunity to improve platform supportability.

- Understand and adhere to the Software Development Life Cycle (SDLC) and Bank development standards.