Identity & Access Management (IAM) Engineer

Interscripts, Inc.; Hyderabad; On-site; INR 2,800,000 - 4,000,000; Full time

Job summary

InterScripts, Inc. is seeking an Identity & Access Management (IAM) Engineer to own identity infrastructure and access lifecycle operations across the enterprise. The role focuses on directory services, authentication, and identity governance at the platform level (Active Directory, Microsoft Entra ID, SSO, MFA).

The EHR provisioning is handled separately by clinical teams. The candidate will support that upstream by ensuring accurate identity data and timely account lifecycle events, with

Qualifications

• 3-5+ years in identity and access management or systems administration with a heavy identity focus.
• Deep hands-on expertise with Active Directory and Entra ID in a hybrid environment.
• Working knowledge of SAML, OIDC/OAuth 2.0, SCIM, LDAP, and Kerberos.
• Experience deploying MFA and conditional access at enterprise scale.
• PowerShell scripting for AD/Entra automation and reporting.
• Experience supporting audits and access reviews in a regulated environment.
• Understanding of least-privilege and HIPAA “minimum necessary” principles.

Responsibilities

• Administer on-prem AD and Microsoft Entra ID: user and group lifecycle, OU structure, GPOs, hybrid sync, and conditional access policies.
• Execute and automate joiner/mover/leaver processes from HR data; deprovision across AD, M365, VPN, and downstream systems.
• Configure and maintain SSO integrations (SAML2.0, OIDC); onboard new applications to the identity platform.
• Deploy and support MFA and passwordless initiatives across staff, providers, contractors, and students.
• Support badge-tap / fast user switching for clinical workstations (Imprivata OneSign) with desktop engineering.
• Maintain RBAC models; remediate access creep and orphaned or stale accounts.
• Run access certification campaigns; provide evidence for HIPAA, HITRUST, SOC 2, and internal audits.
• Administer privileged access management for admin and service accounts (vaulting, rotation, monitoring).
• Manage non-employee identity: vendors, travelers, locum tenens, students, and affiliate users outside HR feed.
• Monitor and investigate identity-related security events; support incident response with Security and Compliance.
• Document standards, runbooks, and IAM roadmap; contribute to automation backlog.

Skills

Active Directory

Entra ID

SAML

OIDC

SCIM

LDAP

Kerberos

MFA

Conditional access

PowerShell

Audits and access reviews

least-privilege

HIPAA

Job description

Identity & Access Management (IAM) Engineer

Kondapur, Hyderabad, India | Posted on 09/18/2026

InterScripts is a Information Technology business based in Chantilly,VA and established in 2017 providing technology and platform enabled servicesand solutions. Historically, we have enabled our customers to realize the mostvalue from their technology and resources through our Managed Services, Archival Solution, EHR,ERP, Advisory, Virtual Care, Technology, Application Development, andCybersecurity services.

In addition, InterScripts has substantial experience inproviding Technology and Platform Enabled solutions to commercial, publicsector, and government entities. We are an ISO 27001, 9001 CMMI 3 and SOC 2 certified organization, signifying our ability to lower the risks for ourclients’ application modernization efforts, custom development, support,operations, and MSP projects.

Job Description

Identity& Access Management (IAM) Engineer

Infrastructure& Directory Services|Healthcare Environment|Full-Time

PositionSummary

We areseeking an IAM Engineer to own identity infrastructure and access lifecycleoperations across the enterprise. This role is focused on directory services,authentication, and identity governance at the platform level ActiveDirectory, Microsoft Entra ID, SSO, MFA, and automated provisioning. EHRapplication security (Epic templates, security classes, user profiles) ishandled by a separate clinical applications team; this role supports that teamupstream by ensuring accurate, timely identity data and account lifecycleevents but does not perform EHR provisioning.

KeyResponsibilities

• Administer on-prem Active Directory andMicrosoft Entra ID: user and group lifecycle, OU structure, GPOs, hybrid sync(Entra Connect), and conditional access policies.
• Execute and automate joiner/mover/leaverprocesses driven by the HR system of record, ensuring same-day deprovisioningof departed workforce members across AD, M365, VPN, and downstream systems.
• Configure and maintain SSO integrations (SAML2.0, OIDC) for enterprise and third-party applications; onboard newapplications to the identity platform.
• Deploy and support multifactor authenticationand passwordless initiatives across employed staff, credentialed providers,contractors, and students.
• Support badge-tap / fast user switching forclinical workstations (e.g., Imprivata OneSign) in coordination with desktopengineering.
• Maintain role-based access models at thedirectory and group level; remediate access creep and orphaned or staleaccounts.
• Run periodic access certification campaigns;produce evidence for HIPAA, HITRUST, SOC 2, and internal audit requests.
• Administer privileged access management foradmin and service accounts, including vaulting, rotation, and sessionmonitoring.
• Manage non-employee identity: vendors,travelers, locum tenens providers, students, and affiliate users outside the HRfeed.
• Monitor and investigate identity-relatedsecurity events; support incident response and inappropriate-accessinvestigations with Security and Privacy/Compliance.
• Document standards, runbooks, and workflows;contribute to the IAM roadmap and automation backlog.

Requirements

• 3-5+ years in identity and access managementor systems administration with a heavy identity focus.
• Deep hands-on expertise with Active Directoryand Entra ID in a hybrid environment.
• Working knowledge of SAML, OIDC/OAuth 2.0,SCIM, LDAP, and Kerberos.
• Experience deploying MFA and conditionalaccess at enterprise scale.
• PowerShell scripting for AD/Entra automationand reporting.
• Experience supporting audits and accessreviews in a regulated environment.
• Understanding of least-privilege and HIPAA“minimum necessary” principles.

PreferredQualifications

• Experience in a hospital or health system ITenvironment.
• IGAl platform experience (SailPoint, Saviynt,Okta Identity Governance, or similar).
• Imprivata OneSign or comparable clinical SSO.
• HR-to-identity integration experience(Workday, UKG, or Oracle HCM feeds).
• Certifications: SC-300 (Microsoft Identity andAccess Administrator), Security+, CISSP, or CIDPRO.

WhatThis Role Is Not

This positiondoes not include Epic or other EHR application security build. Candidates willnot manage Epic security classes, templates, or user records that function isowned by the clinical applications team.

Hybrid/on-siteper organizational policy; participation in an on-call rotation foridentity-impacting incidents (account lockouts affecting clinical operations,termination escalations).