Senior Identity and Access Management Engineer

InterSystems is a global technology provider focused on high-performance data platforms that power mission-critical applications across healthcare, financial services, and the public sector. As the company continues its transition from primarily on-premises deployments to cloud-based and SaaS-delivered solutions, the Managed Services organization plays a central role in operating, securing, and scaling these environments for customers worldwide. Managed Services is responsible for the reliability, security, and compliance of InterSystems-hosted platforms across public cloud, private cloud, and datacenter environments. This includes enabling a consistent, secure operating model that meets stringent regulatory and customer requirements while supporting rapid innovation and service delivery. #### Role Summary The Senior IAM Engineer is responsible for designing, implementing, and operating identity and access management platforms across enterprise and Managed Services environments, with a focus on standardization, scalability, and zero trust security models. #### Key Responsibilities - Design and implement IAM architectures across enterprise and cloud platforms - Lead standardization of identity platforms including Microsoft Entra ID, Okta, and Active Directory - Implement authentication and authorization solutions using SAML, OAuth2, and OpenID Connect - Define and enforce RBAC/ABAC models and access governance processes - Integrate IAM solutions with SaaS, cloud, and on-prem applications - Implement and manage secrets management solutions (e.g., HashiCorp Vault) - Support zero trust initiatives with identity as a control plane - Troubleshoot and resolve complex identity and access issues - Evaluate and implement AI-driven identity security capabilities to detect anomalous access patterns, privilege misuse, and identity-related threats. - Partner with security, governance, and platform teams to establish identity controls and access policies for AI applications, agents, and machine identities. - Leverage AI-assisted analytics and automation to improve access reviews, entitlement management, and identity lifecycle processes. #### Required Qualifications and Experience - 7+ years of experience in IAM or security engineering - Deep hands-on experience with Entra ID, Okta, and Active Directory - Strong understanding of identity protocols (SAML, OAuth, OIDC, LDAP) - Experience with privileged access management and secrets management (e.g., HashiCorp Vault) - Experience integrating IAM with cloud platforms and SaaS applications - Understanding of zero trust architecture and identity-driven security - Experience in regulated environments preferred - Relevant certifications encouraged (e.g., Microsoft Identity, Okta Certified, CISSP) --- *We are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.* InterSystems is providing a current good faith estimate of the anticipated base salary range for this position depending on a variety of factors including experience, education, skills, and performance. Other compensation may include a discretionary annual variable target incentive. The company also provides generous employee benefits including: - Medical, vision, and dental insurance - Short-term and long-term disability, and life insurance - 401(k) Profit Sharing Contribution - Paid Time Off and Holidays - Parental Leave - Tuition reimbursement The estimated base compensation range for this role is: $126,000—$151,000 USD **About InterSystems** InterSystems, a creative data technology provider, delivers a unified foundation for next-generation applications for healthcare, finance, manufacturing, and supply chain customers in more than 80 countries. Our data platforms solve interoperability, speed, and scalability problems for large organizations around the globe to unlock the power of data and allow people to perceive data in imaginative ways. Established in 1978, InterSystems is committed to excellence through its 24×7 support for customers and partners around the world. Privately held and headquartered in Boston, Massachusetts, InterSystems has 38 offices in 28 countries worldwide. For more information, please visit [****](https://cts.businesswire.com/ct/CT?id=smartlink&url=https://www.intersystems.com/&esheet=53379223&newsitemid=20230410005415&lan=en-US&anchor=InterSystems.com&index=4&md5=3edf749fa33f5a2ac0c355c410576e90). **AI Disclaimer** InterSystems may use AI tools for its internal operations including administrative tasks during recruitment (e.g., organizing candidate information). InterSystems’ approach to AI is guided by the [InterSystems Responsible AI Guidelines](https://www.intersystems.com/ai-use-guidelines/). AI is not used to make or influence hiring decisions. All decisions are made by InterSystems employees. Candidates may use AI for CV or interview preparation, provided materials are truthful and reflect their own experience. AI tools and third-party transcription services must not be used during interviews or assessments. Please note that the use of wearable technology, including any AI-related tools or other technology-connected devices (such as META or Google smart glasses and/or wearables, and/or any similar devices), is *strictly prohibited* during the interview and screening process with InterSystems. Any applicant who requires a wearable device or any type of technology support during the interview process as a reasonable accommodation under the ADA or applicable state or country laws and regulations must contact the InterSystems Human Resources Department *prior* to attending or participating in any interview or screening process.