Software Engineer, Cybersecurity, Systems Engineer

About The Role

The IAM Security Developer provides hands‑on technical development, integration, and engineering support for the Bank's Identity and Access Management (IAM), Privileged Access Management (PAM), and Certificate Management platforms. This role is responsible for designing, building, testing, and maintaining custom solutions across the following core platforms:

• SailPoint Identity IQ (IIQ) — Identity Governance & Administration
• Delinea Secret Server Cloud — Privileged Access Management
• Keyfactor Command — Certificate Lifecycle Management
• Microsoft Active Directory Certificate Services (AD CS) — Public Key Infrastructure

The IAM Security Developer provides hands‑on technical development, integration, and engineering support for the Bank's Identity and Access Management (IAM), Privileged Access Management (PAM), and Certificate Management platforms. This role is responsible for designing, building, testing, and maintaining custom solutions across the following core platforms:

• SailPoint Identity IQ (IIQ) — Identity Governance & Administration
• Delinea Secret Server Cloud — Privileged Access Management
• Keyfactor Command — Certificate Lifecycle Management
• Microsoft Active Directory Certificate Services (AD CS) — Public Key Infrastructure

The IAM Security Developer partners with the Identity and Access Management team, Information Security, Infrastructure, and business stakeholders to deliver secure, scalable, and auditable identity solutions that support regulatory compliance (SOX, GLBA, FFIEC) and enterprise risk reduction.

• SailPoint Identity IQ (IIQ)
• Develop and maintain custom connectors, rules, workflows, and tasks within SailPoint Identity IQ to support identity lifecycle management (Joiner/Mover/Leaver).
• Build and enhance certification campaigns, access request workflows, policy violations, and role models.
• Develop and maintain custom reports, plugins, and UI customizations using Bean Shell, Java, JSF, and the SailPoint IIQ API/SDK.
• Configure and troubleshoot application onboarding, aggregation, provisioning policies, and correlation rules.
• Integrate SailPoint IIQ with corporate applications
• Delinea Secret Server Cloud
• Develop and maintain custom scripts, integrations, and automation workflows within Delinea Secret Server Cloud for privileged credential vaulting and rotation.
• Build integrations between Secret Server and enterprise tools (e.g., SailPoint IIQ, SIEM, ticketing systems) using the Secret Server REST API and SDK.
• Support the IAM Engineers with discovery rules, distributed engine configuration, and high-availability architecture.
• Assist in the development of Privileged Behavior Analytics (PBA) alerting and reporting.
• Keyfactor Command
• Build and configure integrations and connectors for automated certificate provisioning and renewal.
• Develop custom API-driven automation for certificate lifecycle events (issuance, renewal, revocation, expiration alerting).
• Support certificate store discovery, inventory management, and compliance reporting across the enterprise.
• Collaborate on integration with Microsoft AD CS and Entra  hybrid PKI operations.
• General Engineering & Collaboration
• Write well-designed, testable, and secure code that adheres to coding guidelines and technical design standards.
• Create and maintain technical documentation including specifications, flowcharts, sequence diagrams, and architecture diagrams.
• Partner with QA, Infrastructure, and Information Security teams to drive high-quality, on-time deliverables.
• Participate in peer code reviews, unit testing, and continuous integration/continuous deployment (CI/CD) practices.
• Contribute to operational excellence and continuous improvement initiatives across the IAM platform stack.
• Assist in promptly resolving deployment and production issues; use issue resolution as an opportunity to improve platform supportability.
• Understand and adhere to the Software Development Life Cycle (SDLC) and Bank development standards.
• Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities – knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation…