IAM Epic Security Analyst II

This is a fully remote position, open to applicants in United States.

📋 Description

• Offer guidance and support for Sharp HealthCare's Identity and Access Management and Epic Security strategy.

• Oversee IAM and Epic Security systems to ensure that authorized personnel have the correct access to systems and data.

• Address IAM and Epic Security incidents, service requests, application access requests, and audits.

• Collaborate with IT teams and Sharp departments to develop, maintain, support, and enhance Epic access and security.

• Prepare for internal and external audits, addressing any identified issues.

• Report on KPIs related to IAM, Epic Security, SER, incident/service request management, and compliance.

• Manage on-call rotations and engage in on-call support.

• Train new IT personnel and mentor team members.

• Create and update SOPs and system documentation.

• Monitor and evaluate IAM and Epic system performance, suggesting improvements as needed.

• Oversee daily IAM operations, including IGA, Active Directory, and other IAM systems.

• Ensure adherence to IAM policies, Epic Security standards, regulatory requirements, and corporate security measures.

• Conduct assessments and audits, prepare documentation, and act as an audit point of contact.

• Carry out RBAC certification and manage data contamination.

• Address security vulnerabilities, audit gaps, and risks associated with role structures, excessive permissions, and shared access.

• Facilitate account provisioning, de-provisioning, periodic access reviews, emergency access, and privileged access management.

• Diagnose and resolve complex IAM-related issues.

• Support the implementation of IAM tools and technologies.

• Align RBAC models with Epic security templates and coordinate downstream provisioning via SailPoint.

• Construct and maintain Epic security templates, shared security classes, application-level role structures, SER records, and Blueprints.

• Uphold Epic access guidelines, naming conventions, version control, and change history.

• Maintain provider HL7 interface or API functionality and address any issues.

• Lead a multidisciplinary Epic Security Workgroup.

• Manage Epic Security projects and initiatives.

• Support remote connections, including VPN and Citrix.

• Handle customer escalations and provide IAM/Epic incident and service-request assistance.

• Create knowledge-base articles and facilitate knowledge-transfer sessions.

• Oversee Change Management and Service Desk tickets.

• Collaborate with physicians, management, staff, auditors, investigators, consultants, and vendors.

⛳️ Requirements

• Minimum of 3 years' experience in application access control and information systems security administration within a multi-entity healthcare system.

• At least 3 years of experience with IT Epic support.

• Bachelor's degree in Computer Science, Healthcare, or a related field; alternatively, 4 years of relevant Information Technology experience may replace the degree requirement.

• Epic Security Certification — REQUIRED.

• Epic Data Courier Badge — REQUIRED.

• Epic Provider Administration Badge must be obtained within 90 days of hire.

• Epic Security Post Live Badge is required within 90 days of hire.

• Willingness to work on-call.

• Ability to cross-cover shifts as necessary.

• Familiarity with clinical and business operations in a healthcare setting.

• Understanding of hospital and clinic culture, business practices, and regulatory requirements such as TJC, as well as healthcare information security and privacy standards like HIPAA.

• Knowledge and comprehension of RBAC.

• Familiarity with Identity and Access Management structures and processes, including provisioning, entitlement certification, access removal, and privileged access.

• Understanding of IT security, compliance, and Identity Management.

• Capability to translate functional requirements into application design.

• Strong leadership and communication abilities.

• Preferred: Experience with Active Directory Management.

• Preferred: Six Sigma Yellow Belt Certification.

• Preferred: CompTIA Security+ certification.

• Preferred: Epic Bridges Certification.

• Preferred: Epic Cogito Certification.

🏝️ Benefits

• Flexible start times.

• Participation in on-call rotations.

• Opportunities for training and knowledge transfer.

• Professional certifications, seminars, and training as required by the department.

• Equal opportunity/affirmative action employment.