IAM Analyst
Privia Health · United States · 1 mo ago
RemoteRemoteHealthcare$65k–$80k/yrFull-time
We need to output HTML fragment with sections: About the role? Actually job description includes company description, but we should not repeat job title heading. Use for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule.
We need to include sections only when posting has real specific content. We have:
- Company description: could be "About the role" or "About the company"? The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we can use "About the role" for company description and role overview.
- Responsibilities: primary duties and technical project management etc.
- Requirements: qualifications (mandatory) maybe.
- Qualifications: maybe preferred qualifications? Could combine but we have both required and preferred. Could have "Qualifications" for required, and maybe "Preferred Qualifications" but not in list; we could put under Qualifications.
- Skills: maybe technical skills list.
- Benefits: we have benefits mentioned: medical, dental, vision, life, pet insurance, 401K, paid time off, wellness programs. Also expense reimbursement for remote workers. Also annual bonus targeted at 15%. So we have benefits.
- Pay: salary range $65,000 to $80,000 base pay, exclusive of bonuses/benefits, plus annual bonus target 15%.
- Schedule: not mentioned explicitly; maybe remote work requirements? Not schedule. So we should not create Schedule section if no specific content.
We must not include boilerplate like EEO, legal, etc. Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So we need to strip out the EEO paragraph, the confidentiality line, the technical requirements for remote workers? That's not boilerplate but maybe relevant? It's about remote work requirements; could be considered part of "Additional Information". Might be considered not boilerplate but it's about remote work technical requirements. Could be included under "Requirements" or "Skills"? It's about internet speed. Might be considered a requirement for remote workers. Since it's specific, we could include under "Requirements" or maybe a separate "Remote Work Requirements" but not in allowed headings. Could fold into "Requirements" as a bullet.
We must preserve all substantive information; do not invent or summarize away detail. So we need to include all details from job description.
Let's extract content:
Company Description: Privia Health™ is a technology-driven, national physician enablement company that collaborates with medical groups, health plans, and health systems to optimize physician practices, improve patient experiences, and reward doctors for delivering high-value care in both in-person and virtual settings. The Privia Platform is led by top industry talent and exceptional physician leadership, and consists of scalable operations and end-to-end, cloud-based technology that reduces unnecessary healthcare costs, achieves better outcomes, and improves the health of patients and the well-being of providers.
Job Description: Reports to the Manager, IAM. This position supports IAM operations while leading large, complex, cross-functional initiatives involving identity, access, security, and enterprise applications. The role is responsible for coordinating work from planning through implementation, including defining deliverables, establishing timelines, coordinating resources and dependencies, tracking risks and issues, and driving work to completion. The IAM Analyst works directly with technical teams, business and operational leaders, and executive stakeholders to coordinate enterprise initiatives and communicate status, decisions, risks, and required actions. The position partners closely with the Manager, IAM and Director, Identity to execute strategic IAM priorities and ensure alignment across participating teams. In addition to leading large initiatives, the role maintains hands-on responsibility for IAM operations, including access administration, governance, lifecycle processes, issue resolution, process improvement, and related documentation. The IAM Analyst is expected to apply IAM expertise to both the execution of enterprise initiatives and the development of sustainable operational processes.
Primary Duties (list):
- Collaborate with security, technology, enterprise applications, and business teams on IAM initiatives and operational activities.
- Support and coordinate user provisioning, access modification, and termination across multiple systems and applications.
- Lead assigned IAM initiatives from planning through implementation, coordinating stakeholders, deliverables, timelines, dependencies, risks, and required decisions.
- Partner with the Manager, IAM and Director, Identity to execute enterprise IAM priorities and coordinate work across participating teams.
- Serve as a primary escalation point for complex or high-priority IAM issues and initiatives.
- Coordinate with Tier I and Tier II IAM teams to ensure operational activities, project deliverables, and established processes are completed accurately and on schedule.
- Perform QA reviews of IAM operations and ensure established processes and procedures are followed.
- Maintain IAM practices, processes, and procedures in alignment with organizational policy, security requirements, and regulatory obligations.
- Contribute to the development and implementation of identity governance policies and controls using IGA tools and technologies.
Technical Project Management and Process Improvement (list):
- Lead assigned IAM initiatives from planning through implementation, including large and complex cross-functional efforts.
- Manage multiple concurrent initiatives while maintaining timelines, deliverables, dependencies, risks, issues, decisions, and stakeholder communications.
- Coordinate technical and business resources to ensure initiatives remain aligned with established objectives and delivery expectations.
- Provide regular status updates to IAM leadership and relevant operational and executive stakeholders, escalating risks, issues, and decisions when appropriate.
- Identify opportunities for process, technology, and operational improvements and develop actionable recommendations for IAM leadership.
- Develop and maintain standard operating procedures, requirements, processes, and other documentation needed to support IAM operations and initiative delivery.
- Facilitate working sessions and coordinate follow-up activities to ensure commitments and deliverables are completed.
- Support the transition of implemented solutions and processes into sustainable IAM operations.
Qualifications (required):
- 3+ years of experience leading or coordinating technical projects, project management programs, or complex cross-functional initiatives.
- 3+ years of experience in access and data management, identity lifecycle management, or user provisioning; healthcare technology experience preferred.
- Experience working in a healthcare environment strongly preferred.
- Demonstrated experience coordinating complex work across technical, operational, and business stakeholders.
- Demonstrated ability to manage multiple concurrent initiatives with competing priorities, dependencies, and deadlines.
- Working knowledge of the security concepts and technologies described above.
- Must comply with all HIPAA rules and regulations.
Preferred Qualifications:
- Bachelor's degree in a related field or equivalent combination of education and experience preferred.
- Experience leading enterprise IAM, IGA, PAM, SSO, or identity lifecycle initiatives.
- Experience with SailPoint, Ping Identity, or comparable IAM/IGA platforms.
- Cloud/SaaS Experience with user provisioning, identity lifecycle processes, and access administration in cloud environments such as Google Workspace or Microsoft 365.
- Experience with Google Workspace or Google Cloud is preferred.
- Experience supporting or implementing cloud identity and access initiatives across multiple teams or business functions is preferred.
- IAM, IGA, and PAM Proficiency in identity lifecycle management and user access control, including onboarding, access changes, employee transfers, and offboarding.
- Experience developing and implementing access control strategies involving provisioning, deprovisioning, access modifications, and least-privilege requirements.
- Experience leading or coordinating IAM or IGA initiatives involving multiple applications, teams, stakeholders, and technical dependencies is preferred.
- Working knowledge of IAM solutions such as Okta, Ping Identity, or One Identity, as well as IGA solutions such as SailPoint or Saviynt, is preferred.
- EHR/EMR Experience supporting user access and provisioning within an EHR, EMR, or practice management environment; athenaOne experience is preferred.
- Knowledge of creating, modifying, and terminating user profiles and access within an EHR, EMR, or practice management application.
- Experience supporting EHR or EMR access initiatives involving multiple operational or technical teams is preferred.
- Applications, Databases, and Interfaces:
- Working knowledge of security principles for three-tier application architectures.
- Working knowledge of cloud-based security architectures, including modern multi-cloud environments.
- Understanding of the differences between cloud-hosted applications and virtual desktop or application environments, such as Citrix or VDI.
- Strong spreadsheet skills using Excel or Google Sheets, including pivot tables, VLOOKUPs, and data analysis.
Additional Information (benefits/pay etc):
- All your information will be kept confidential according to EEO guidelines. (remove)
- The salary range for this role is $65,000.00 to $80,000.00 in base pay and exclusive of any bonuses or benefits (medical, dental, vision, life, and pet insurance, 401K, paid time off, and other wellness programs). This role is also eligible for an annual bonus targeted at 15%. The base pay offered will be determined based on relevant factors such as experience, education, and geographic location.
- Technical Requirements (for remote workers only, not applicable for onsite/in office work): In order to successfully work remotely, supporting our patients and providers, we require a minimum of 5 MBPS for Download Speed and 3 MBPS for the Upload Speed. This should be acquired prior to the start of your employment. The best measure of your internet speed is to use online speed tests like https://www.speedtest.net/. This gives you an update as to how fast data transfer is with your internet connection and if it meets the minimum speed requirements. Work with your internet provider if you have questions about your connection. Employees who regularly work from home offices are eligible for expense reimbursement to offset this cost.
- Privia Health is committed to creating and fostering a work environment that allows and encourages you to bring your whole self to work. We understand that healthcare is local and we are better when our people are a reflection of the communities that we serve. Our goal is to encourage people to pursue all opportunities regardless of their age, color, national origin, physical or mental (dis)ability, race, religion, gender, sex, gender identity and/or expression, marital status, veteran status, or any other characteristic protected by federal, state or local law. (EEO boilerplate, remove)
We need to output HTML fragment with sections: About the role (company description + role overview), Responsibilities (primary duties + technical project management), Qualifications (required), Skills (maybe technical skills list), Benefits, Pay.
We must not repeat job title as heading. Use
for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule.
We need to include sections only when posting has real specific content. We have:
- Company description: could be "About the role" or "About the company"? The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we can use "About the role" for company description and role overview.
- Responsibilities: primary duties and technical project management etc.
- Requirements: qualifications (mandatory) maybe.
- Qualifications: maybe preferred qualifications? Could combine but we have both required and preferred. Could have "Qualifications" for required, and maybe "Preferred Qualifications" but not in list; we could put under Qualifications.
- Skills: maybe technical skills list.
- Benefits: we have benefits mentioned: medical, dental, vision, life, pet insurance, 401K, paid time off, wellness programs. Also expense reimbursement for remote workers. Also annual bonus targeted at 15%. So we have benefits.
- Pay: salary range $65,000 to $80,000 base pay, exclusive of bonuses/benefits, plus annual bonus target 15%.
- Schedule: not mentioned explicitly; maybe remote work requirements? Not schedule. So we should not create Schedule section if no specific content.
We must not include boilerplate like EEO, legal, etc. Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So we need to strip out the EEO paragraph, the confidentiality line, the technical requirements for remote workers? That's not boilerplate but maybe relevant? It's about remote work requirements; could be considered part of "Additional Information". Might be considered not boilerplate but it's about remote work technical requirements. Could be included under "Requirements" or "Skills"? It's about internet speed. Might be considered a requirement for remote workers. Since it's specific, we could include under "Requirements" or maybe a separate "Remote Work Requirements" but not in allowed headings. Could fold into "Requirements" as a bullet.
We must preserve all substantive information; do not invent or summarize away detail. So we need to include all details from job description.
Let's extract content:
Company Description: Privia Health™ is a technology-driven, national physician enablement company that collaborates with medical groups, health plans, and health systems to optimize physician practices, improve patient experiences, and reward doctors for delivering high-value care in both in-person and virtual settings. The Privia Platform is led by top industry talent and exceptional physician leadership, and consists of scalable operations and end-to-end, cloud-based technology that reduces unnecessary healthcare costs, achieves better outcomes, and improves the health of patients and the well-being of providers.
Job Description: Reports to the Manager, IAM. This position supports IAM operations while leading large, complex, cross-functional initiatives involving identity, access, security, and enterprise applications. The role is responsible for coordinating work from planning through implementation, including defining deliverables, establishing timelines, coordinating resources and dependencies, tracking risks and issues, and driving work to completion. The IAM Analyst works directly with technical teams, business and operational leaders, and executive stakeholders to coordinate enterprise initiatives and communicate status, decisions, risks, and required actions. The position partners closely with the Manager, IAM and Director, Identity to execute strategic IAM priorities and ensure alignment across participating teams. In addition to leading large initiatives, the role maintains hands-on responsibility for IAM operations, including access administration, governance, lifecycle processes, issue resolution, process improvement, and related documentation. The IAM Analyst is expected to apply IAM expertise to both the execution of enterprise initiatives and the development of sustainable operational processes.
Primary Duties (list):
- Collaborate with security, technology, enterprise applications, and business teams on IAM initiatives and operational activities.
- Support and coordinate user provisioning, access modification, and termination across multiple systems and applications.
- Lead assigned IAM initiatives from planning through implementation, coordinating stakeholders, deliverables, timelines, dependencies, risks, and required decisions.
- Partner with the Manager, IAM and Director, Identity to execute enterprise IAM priorities and coordinate work across participating teams.
- Serve as a primary escalation point for complex or high-priority IAM issues and initiatives.
- Coordinate with Tier I and Tier II IAM teams to ensure operational activities, project deliverables, and established processes are completed accurately and on schedule.
- Perform QA reviews of IAM operations and ensure established processes and procedures are followed.
- Maintain IAM practices, processes, and procedures in alignment with organizational policy, security requirements, and regulatory obligations.
- Contribute to the development and implementation of identity governance policies and controls using IGA tools and technologies.
Technical Project Management and Process Improvement (list):
- Lead assigned IAM initiatives from planning through implementation, including large and complex cross-functional efforts.
- Manage multiple concurrent initiatives while maintaining timelines, deliverables, dependencies, risks, issues, decisions, and stakeholder communications.
- Coordinate technical and business resources to ensure initiatives remain aligned with established objectives and delivery expectations.
- Provide regular status updates to IAM leadership and relevant operational and executive stakeholders, escalating risks, issues, and decisions when appropriate.
- Identify opportunities for process, technology, and operational improvements and develop actionable recommendations for IAM leadership.
- Develop and maintain standard operating procedures, requirements, processes, and other documentation needed to support IAM operations and initiative delivery.
- Facilitate working sessions and coordinate follow-up activities to ensure commitments and deliverables are completed.
- Support the transition of implemented solutions and processes into sustainable IAM operations.
Qualifications (required):
- 3+ years of experience leading or coordinating technical projects, project management programs, or complex cross-functional initiatives.
- 3+ years of experience in access and data management, identity lifecycle management, or user provisioning; healthcare technology experience preferred.
- Experience working in a healthcare environment strongly preferred.
- Demonstrated experience coordinating complex work across technical, operational, and business stakeholders.
- Demonstrated ability to manage multiple concurrent initiatives with competing priorities, dependencies, and deadlines.
- Working knowledge of the security concepts and technologies described above.
- Must comply with all HIPAA rules and regulations.
Preferred Qualifications:
- Bachelor's degree in a related field or equivalent combination of education and experience preferred.
- Experience leading enterprise IAM, IGA, PAM, SSO, or identity lifecycle initiatives.
- Experience with SailPoint, Ping Identity, or comparable IAM/IGA platforms.
- Cloud/SaaS Experience with user provisioning, identity lifecycle processes, and access administration in cloud environments such as Google Workspace or Microsoft 365.
- Experience with Google Workspace or Google Cloud is preferred.
- Experience supporting or implementing cloud identity and access initiatives across multiple teams or business functions is preferred.
- IAM, IGA, and PAM Proficiency in identity lifecycle management and user access control, including onboarding, access changes, employee transfers, and offboarding.
- Experience developing and implementing access control strategies involving provisioning, deprovisioning, access modifications, and least-privilege requirements.
- Experience leading or coordinating IAM or IGA initiatives involving multiple applications, teams, stakeholders, and technical dependencies is preferred.
- Working knowledge of IAM solutions such as Okta, Ping Identity, or One Identity, as well as IGA solutions such as SailPoint or Saviynt, is preferred.
- EHR/EMR Experience supporting user access and provisioning within an EHR, EMR, or practice management environment; athenaOne experience is preferred.
- Knowledge of creating, modifying, and terminating user profiles and access within an EHR, EMR, or practice management application.
- Experience supporting EHR or EMR access initiatives involving multiple operational or technical teams is preferred.
- Applications, Databases, and Interfaces:
- Working knowledge of security principles for three-tier application architectures.
- Working knowledge of cloud-based security architectures, including modern multi-cloud environments.
- Understanding of the differences between cloud-hosted applications and virtual desktop or application environments, such as Citrix or VDI.
- Strong spreadsheet skills using Excel or Google Sheets, including pivot tables, VLOOKUPs, and data analysis.
Additional Information (benefits/pay etc):
- All your information will be kept confidential according to EEO guidelines. (remove)
- The salary range for this role is $65,000.00 to $80,000.00 in base pay and exclusive of any bonuses or benefits (medical, dental, vision, life, and pet insurance, 401K, paid time off, and other wellness programs). This role is also eligible for an annual bonus targeted at 15%. The base pay offered will be determined based on relevant factors such as experience, education, and geographic location.
- Technical Requirements (for remote workers only, not applicable for onsite/in office work): In order to successfully work remotely, supporting our patients and providers, we require a minimum of 5 MBPS for Download Speed and 3 MBPS for the Upload Speed. This should be acquired prior to the start of your employment. The best measure of your internet speed is to use online speed tests like https://www.speedtest.net/. This gives you an update as to how fast data transfer is with your internet connection and if it meets the minimum speed requirements. Work with your internet provider if you have questions about your connection. Employees who regularly work from home offices are eligible for expense reimbursement to offset this cost.
- Privia Health is committed to creating and fostering a work environment that allows and encourages you to bring your whole self to work. We understand that healthcare is local and we are better when our people are a reflection of the communities that we serve. Our goal is to encourage people to pursue all opportunities regardless of their age, color, national origin, physical or mental (dis)ability, race, religion, gender, sex, gender identity and/or expression, marital status, veteran status, or any other characteristic protected by federal, state or local law. (EEO boilerplate, remove)
We need to output HTML fragment with sections: About the role (company description + role overview), Responsibilities (primary duties + technical project management), Qualifications (required), Skills (maybe technical skills list), Benefits, Pay.
We must not repeat job title as heading. Use for each section.
We need to preserve all substantive information; do not invent or summarize away detail. So we need to include all details from the lists.
We must not include boilerplate like EEO, confidentiality, etc.
We need to decide what goes where.
About the role: Could include company description and the initial job description paragraph (Reports to Manager, IAM ...). That seems appropriate.
Responsibilities: Combine Primary Duties and Technical Project Management and Process Improvement into a single list under Responsibilities. Could split into two sub-sections but we only have - . We can just make one list.
Qualifications: Required qualifications (the bullet list under "Qualifications").
Skills: Could include the "Applications, Databases, and Interfaces" bullet list plus maybe the preferred qualifications? But preferred qualifications are more like qualifications. However we have a separate "Qualifications" heading for required; we could put preferred qualifications under "Qualifications" as well, but we need to avoid duplication. The instruction says prefer a few substantive sections over many thin ones. So we could have Qualifications include both required and preferred, maybe separate with headings inside? But we cannot add extra headings besides the allowed ones? We could still use
to differentiate. But better to keep Qualifications for required, and Skills for technical skills (applications, databases, interfaces). Preferred qualifications could be placed under Qualifications as well, but that may mix. However we have a separate "Skills" heading allowed; we could put the technical skills there.
Benefits: list of benefits: medical, dental, vision, life, pet insurance, 401K, paid time off, other wellness programs, expense reimbursement for remote workers, annual bonus target 15%.
Pay: salary range $65k-$8
- . We can just make one list.
Qualifications: Required qualifications (the bullet list under "Qualifications").
Skills: Could include the "Applications, Databases, and Interfaces" bullet list plus maybe the preferred qualifications? But preferred qualifications are more like qualifications. However we have a separate "Qualifications" heading for required; we could put preferred qualifications under "Qualifications" as well, but we need to avoid duplication. The instruction says prefer a few substantive sections over many thin ones. So we could have Qualifications include both required and preferred, maybe separate with headings inside? But we cannot add extra headings besides the allowed ones? We could still use
to differentiate. But better to keep Qualifications for required, and Skills for technical skills (applications, databases, interfaces). Preferred qualifications could be placed under Qualifications as well, but that may mix. However we have a separate "Skills" heading allowed; we could put the technical skills there. Benefits: list of benefits: medical, dental, vision, life, pet insurance, 401K, paid time off, other wellness programs, expense reimbursement for remote workers, annual bonus target 15%. Pay: salary range $65k-$8