{"id":3447272,"url":"https://alion.io/job/interscripts-identity-access-management-iam-engineer","title":"Identity & Access Management (IAM) Engineer","company":{"id":4429631,"name":"Interscripts","domain":"interscripts.com","url":"https://alion.io/company/interscripts","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":13000,"max_usd":32000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"CyberArk","optional":false},{"name":"Delinea","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Oracle ERP","optional":false},{"name":"PowerShell","optional":false},{"name":"SOC 2","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-10-29T08:55:49Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-01T03:07:11Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Identity\n& Access Management (IAM) Engineer\nInfrastructure\n& Directory Services|Healthcare Environment|Full-Time\nPosition\nSummary\nWe are\nseeking an IAM Engineer to own identity infrastructure and access lifecycle\noperations across the enterprise. This role is focused on directory services,\nauthentication, and identity governance at the platform level - Active\nDirectory, Microsoft Entra ID, SSO, MFA, and automated provisioning. EHR\napplication security (Epic templates, security classes, user profiles) is\nhandled by a separate clinical applications team; this role supports that team\nupstream by ensuring accurate, timely identity data and account lifecycle\nevents but does not perform EHR provisioning.\nKey\nResponsibilities\nAdminister on-prem Active Directory and\nMicrosoft Entra ID: user and group lifecycle, OU structure, GPOs, hybrid sync\n(Entra Connect), and conditional access policies.\nExecute and automate joiner/mover/leaver\nprocesses driven by the HR system of record, ensuring same-day deprovisioning\nof departed workforce members across AD, M365, VPN, and downstream systems.\nConfigure and maintain SSO integrations (SAML\n2.0, OIDC) for enterprise and third-party applications; onboard new\napplications to the identity platform.\nDeploy and support multifactor authentication\nand passwordless initiatives across employed staff, credentialed providers,\ncontractors, and students.\nSupport badge-tap / fast user switching for\nclinical workstations (e.g., Imprivata OneSign) in coordination with desktop\nengineering.\nMaintain role-based access models at the\ndirectory and group level; remediate access creep and orphaned or stale\naccounts.\nRun periodic access certification campaigns;\nproduce evidence for HIPAA, HITRUST, SOC 2, and internal audit requests.\nAdminister privileged access management for\nadmin and service accounts, including vaulting, rotation, and session\nmonitoring.\nManage non-employee identity: vendors,\ntravelers, locum tenens providers, students, and affiliate users outside the HR\nfeed.\nMonitor and investigate identity-related\nsecurity events; support incident response and inappropriate-access\ninvestigations with Security and Privacy/Compliance.\nDocument standards, runbooks, and workflows;\ncontribute to the IAM roadmap and automation backlog.\nRequirements\n3-5+ years in identity and access management\nor systems administration with a heavy identity focus.\nDeep hands-on expertise with Active Directory\nand Entra ID in a hybrid environment.\nWorking knowledge of SAML, OIDC/OAuth 2.0,\nSCIM, LDAP, and Kerberos.\nExperience deploying MFA and conditional\naccess at enterprise scale.\nPowerShell scripting for AD/Entra automation\nand reporting.\nExperience supporting audits and access\nreviews in a regulated environment.\nUnderstanding of least-privilege and HIPAA\n“minimum necessary” principles.\nPreferred\nQualifications\nExperience in a hospital or health system IT\nenvironment.\nIGA platform experience (SailPoint, Saviynt,\nOkta Identity Governance, or similar).\nPAM tooling (CyberArk, Delinea).\nImprivata OneSign or comparable clinical SSO.\nHR-to-identity integration experience\n(Workday, UKG, or Oracle HCM feeds).\nCertifications: SC-300 (Microsoft Identity and\nAccess Administrator), Security+, CISSP, or CIDPRO.\nWhat\nThis Role Is Not\nThis position\ndoes not include Epic or other EHR application security build. Candidates will\nnot manage Epic security classes, templates, or user records - that function is\nowned by the clinical applications team.\nWork\nEnvironment\nHybrid/on-site\nper organizational policy; participation in an on-call rotation for\nidentity-impacting incidents (account lockouts affecting clinical operations,\ntermination escalations).","description_format":"text","description_chars":3686,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Health Care","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-29T08:55:49Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/interscripts-identity-access-management-iam-engineer","json_url":"https://alion.io/job/interscripts-identity-access-management-iam-engineer.json","meta":{"generated_at":"2026-11-01T06:13:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9699,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4429631},"rest":"https://alion.io/mcp/rest/get_company?id=4429631"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finterscripts-identity-access-management-iam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finterscripts-identity-access-management-iam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finterscripts-identity-access-management-iam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/interscripts-identity-access-management-iam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finterscripts-identity-access-management-iam-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3447272}},{"tool":"search_jobs","arguments":{"company":"interscripts.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3447272},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}