{"id":11389,"url":"https://alion.io/job/intersystems-senior-identity-and-access-management-engineer","title":"Senior Identity and Access Management Engineer","company":{"id":3670,"name":"InterSystems","domain":"intersystems.com","url":"https://alion.io/company/intersystems","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":89,"open_postings":98,"ghost_share":0.102,"stale_share":0,"repost_share":0.01,"time_to_fill_p50_days":98,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Boston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":126000,"max":151000,"currency":"USD","period":"year","gross":null,"usd_annual":151000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2025-06-24T14:06:02Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-24T22:42:04Z","board_verified":true,"closed_at":null,"days_open":487,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":486},"description":"InterSystems is a global technology provider focused on high-performance data platforms that power mission-critical applications across healthcare, financial services, and the public sector. As the company continues its transition from primarily on-premises deployments to cloud-based and SaaS-delivered solutions, the Managed Services organization plays a central role in operating, securing, and scaling these environments for customers worldwide.\nManaged Services is responsible for the reliability, security, and compliance of InterSystems-hosted platforms across public cloud, private cloud, and datacenter environments. This includes enabling a consistent, secure operating model that meets stringent regulatory and customer requirements while supporting rapid innovation and service delivery.\nRole Summary\nThe Senior IAM Engineer is responsible for designing, implementing, and operating identity and access management platforms across enterprise and Managed Services environments, with a focus on standardization, scalability, and zero trust security models.\nKey Responsibilities\nDesign and implement IAM architectures across enterprise and cloud platforms\nLead standardization of identity platforms including Microsoft Entra ID, Okta, and Active Directory\nImplement authentication and authorization solutions using SAML, OAuth2, and OpenID Connect\nDefine and enforce RBAC/ABAC models and access governance processes\nIntegrate IAM solutions with SaaS, cloud, and on-prem applications\nImplement and manage secrets management solutions (e.g., HashiCorp Vault)\nSupport zero trust initiatives with identity as a control plane\nTroubleshoot and resolve complex identity and access issues\nEvaluate and implement AI-driven identity security capabilities to detect anomalous access patterns, privilege misuse, and identity-related threats.\nPartner with security, governance, and platform teams to establish identity controls and access policies for AI applications, agents, and machine identities.\nLeverage AI-assisted analytics and automation to improve access reviews, entitlement management, and identity lifecycle processes.\nRequired Qualifications and Experience\n7+ years of experience in IAM or security engineering\nDeep hands-on experience with Entra ID, Okta, and Active Directory\nStrong understanding of identity protocols (SAML, OAuth, OIDC, LDAP)\nExperience with privileged access management and secrets management (e.g., HashiCorp Vault)\nExperience integrating IAM with cloud platforms and SaaS applications\nUnderstanding of zero trust architecture and identity-driven security\nExperience in regulated environments preferred\nRelevant certifications encouraged (e.g., Microsoft Identity, Okta Certified, CISSP)\nWe are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.\nInterSystems is providing a current good faith estimate of the anticipated base salary range for this position depending on a variety of factors including experience, education, skills, and performance.\nOther compensation may include a discretionary annual variable target incentive.\nThe company also provides generous employee benefits including:\nMedical, vision, and dental insurance\nShort-term and long-term disability, and life insurance\n401(k) Profit Sharing Contribution\nPaid Time Off and Holidays\nParental Leave\nTuition reimbursement\nThe estimated base compensation range for this role is:\n$126,000—$151,000 USD\nAbout InterSystems\nInterSystems, a creative data technology provider, delivers a unified foundation for next-generation applications for healthcare, finance, manufacturing, and supply chain customers in more than 80 countries. Our data platforms solve interoperability, speed, and scalability problems for large organizations around the globe to unlock the power of data and allow people to perceive data in imaginative ways. Established in 1978, InterSystems is committed to excellence through its 24×7 support for customers and partners around the world. Privately held and headquartered in Boston, Massachusetts, InterSystems has 38 offices in 28 countries worldwide. For more information, please visit InterSystems.com.\nAI Disclaimer\nInterSystems may use AI tools for its internal operations including administrative tasks during recruitment (e.g., organizing candidate information). InterSystems’ approach to AI is guided by the InterSystems Responsible AI Guidelines. AI is not used to make or influence hiring decisions. All decisions are made by InterSystems employees.\nCandidates may use AI for CV or interview preparation, provided materials are truthful and reflect their own experience. AI tools and third-party transcription services must not be used during interviews or assessments.\nPlease note that the use of wearable technology, including any AI-related tools or other technology-connected devices (such as META or Google smart glasses and/or wearables, and/or any similar devices), is strictly prohibited during the interview and screening process with InterSystems. Any applicant who requires a wearable device or any type of technology support during the interview process as a reasonable accommodation under the ADA or applicable state or country laws and regulations must contact the InterSystems Human Resources Department prior to attending or participating in any interview or screening process.","description_format":"text","description_chars":5589,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Life insurance","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Data Integration & ETL Tools","Databases & DBMS","Health Data & Interoperability"],"lifecycle":[{"event":"open","at":"2025-06-24T14:06:02Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 55 · green card filings: 42","filings_12m":55,"filings_prev_12m":67,"green_card_filings_12m":42,"median_offered_wage_usd":114768,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":10}],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.3,"p_room":0.28,"age_days":486,"expected_fill_days":98,"reasons":["conf:2","velocity","ghost","win:tail","crowd:"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":151000,"is_top_pay":false},"html_url":"https://alion.io/job/intersystems-senior-identity-and-access-management-engineer","json_url":"https://alion.io/job/intersystems-senior-identity-and-access-management-engineer.json","meta":{"generated_at":"2026-10-24T22:51:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33503,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3670},"rest":"https://alion.io/mcp/rest/get_company?id=3670"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fintersystems-senior-identity-and-access-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fintersystems-senior-identity-and-access-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fintersystems-senior-identity-and-access-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/intersystems-senior-identity-and-access-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fintersystems-senior-identity-and-access-management-engineer"}]}