[Hiring] IAM Epic Security Analyst II @Sharp HealthCare

Role Description

Provides guidance and support to the IAM Security team, organization and business partners on Sharp HealthCare's Identity and Access Management (IAM) and Epic Security strategy; ensuring policies and security standards are met. Responsible for the maintenance of identity and access management systems, ensuring authorized individuals have appropriate access to systems and data. Efficiently and effectively, respond to IAM and Epic Security incidents, service requests, application access requests and audits. Provides support to peers as well as various other departments of the organization. Responsible for coordinating activities with multiple IT teams and Sharp departments to develop, maintain, support, and enhance Epic access and security.

Qualifications

• 3 Years experience in application access control including experience in information systems security administration in a multi entity health care system, experience with supporting, improving, reporting, documenting audits and compliance with internal and external audits.
• 3 Years experience with IT Epic support.

Requirements

• Bachelor's degree in Computer Science, Healthcare, or related field; or 4 years of relevant experience in Information Technology may substitute for degree - REQUIRED.
• Epic Security Certification - REQUIRED.
• Epic Data Courier Badge - REQUIRED.
• Epic Provider Administration Badge is required within 90 days of hire.
• Epic Security Post Live Badge is required within 90 days of hire.

Preferred Qualifications

• Experience with Active Directory Management.
• Extensive operational knowledge and experience with IAM concepts, principles and best practices such as identity federation, role-based access control and access management processes.
• Six Sigma Yellow Belt Certification - Various-No accreditation board - PREFERRED.
• CompTIA Security+ - CompTIA - PREFERRED.
• Epic Bridges Certification - PREFERRED.
• Epic Cogito Certification - PREFERRED.

Essential Functions

• Ensure readiness for internal and external audits, including action plan to promptly resolve issues identified and ensure Standard Operating Procedures are created and followed.
• Report out on agreed upon Key Performance Indicators (KPIs) related to IAM, Epic Security, SER, incident/service request management and compliance.
• Manage on-call rotations.
• Train new IT staff in system functions and operations in order to maximize user effectiveness and utilization of systems.
• Develop and maintain Standard Operating Procedures (SOPs) for IAM, Epic Security, and SER.
• Monitor and analyze IAM and Epic system performance, make recommendations for improvements.
• Monitor the daily operations of IAM systems (IGA, Active Directory and other IAM systems), ensuring efficient and secure access management.
• Demonstrate in depth, detailed technical knowledge of security requirements and solutions.
• Develop and/or follow practices/guidelines in relation to compliance with IAM Policies, Epic Security, standards, regulatory requirements and ensure the proper processes are followed when exceptions arise.
• Demonstrate content expertise regarding application and business operations by mentoring staff.

Department Support

• Provide operational support including, but not limited to: account provisioning, de-provisioning, periodic access reviews, emergency access, and privileged access management.
• Provide support for IAM-related issues, troubleshooting and resolving complex problems.
• Support the implementation of IAM tools and technologies to enhance security and user experience.
• Partner closely with the Identity and Access Management (IAM) Development team to align role-based access models (RBAC) with Epic security templates and coordinate downstream provisioning through tools like SailPoint.
• Build and maintain Epic security templates, shared security classes, and application-level role structures in collaboration with analysts and business partners.
• Maintain guidelines for appropriate access in Epic, including compliance with regulatory limitations.
• Document and adhere to standards for naming conventions, template usage, ownership definitions, and cross-application alignment.
• Maintain functionality and resolve issues with the provider HL7 interface or API.
• Participate in on call support for the IAM and Epic Security group.
• Ensure operational procedures are created and followed.
• Facilitate and participate in a multidisciplinary Epic Security Workgroup with representation from ISD Application teams, Compliance, IAM, Training, Clinical Informatics and Operations.
• Lead Epic Security projects and initiatives to improve the access management process.

Customer Service

• Maintain active relationships with all customers by continuously assessing needs, preferences and level of satisfaction with tasks.
• Work effectively with physicians, management, staff, auditors, investigators, consultants and vendors.
• Provide continuing support of remote connections, including VPN and Citrix.
• Develop knowledge base articles for the Technical Assistance Center.
• Provide in-service or knowledge transfer sessions to Technical Assistance Center staff and other departments, as needed.
• Monitor Change Management tickets for timeliness, quality, and documented processes are followed.
• Respond to IAM/Epic incidents in a timely manner.

Knowledge, Skills, and Abilities

• Knowledge of clinical and business operations in a healthcare environment.
• Ability to interpret functional requirements into applications design.
• Ability to communicate technical issues to technical staff and nontechnical users/clients.
• Must have strong leadership and communication skills.
• Knowledge of hospital and clinic culture, business practices, regulatory requirements (e.g., TJC), and health care requirements as it relates to information security and privacy (e.g., HIPAA).
• Knowledge and understanding of RBAC.
• Knowledge of Identity and Access Management structures/processes such as provisioning, entitlement certification, access removal and privileged access.
• Knowledge of IT security, compliance and Identity Management.
• Ability to work on-call.
• Ability to cross cover shifts as needed.