Sr. User Security & Access Analyst - Hybrid - 140754

About the role

The User Security & Access Analyst IV is an advanced individual contributor and recognized subject matter expert responsible for leading highly complex and high-impact identity, access management, Epic security, and access governance initiatives. This position provides advanced technical direction, leads complex security analysis and process improvements, influences enterprise access standards, and serves as a trusted technical resource for leadership and cross-functional stakeholders.

Responsibilities

• Lead analysis and resolution of highly complex, high-impact, or cross-functional access and security issues.
• Serve as a technical lead for enterprise identity platforms, including SailPoint, Okta, Microsoft Entra ID (Azure AD), and Active Directory, ensuring system reliability, integration effectiveness, and alignment with standards.
• Develop and enhance access management processes, role-based security models, provisioning workflows, and governance controls while providing advanced troubleshooting, risk assessment, and guidance on complex identity and access matters.
• Evaluate complex or unprecedented access requirements and develop secure, sustainable solutions when existing processes do not adequately address the need.
• Lead security analysis involving multiple applications, departments, workflows, or organizational areas.
• Evaluate technical, operational, compliance, and security risks associated with access decisions.
• Lead efforts to identify and remediate excessive, conflicting, outdated, or unnecessarily complex access structures.
• Provide advanced guidance regarding Epic roles, security templates, provisioning models, and access standardization.
• Lead or serve as the security subject matter expert for major projects and enterprise initiatives.
• Develop and recommend improvements to security standards, procedures, governance, and access-management practices.
• Lead strategic process-improvement and automation initiatives with broader organizational impact.
• Partner with leadership, application owners, compliance, risk, HR, IT, and operational stakeholders on complex security matters.
• Lead audit-readiness activities and assist in developing sustainable remediation strategies.
• Expected to mentor and provide technical guidance to junior analysts on complex security and access matters.
• Support leadership in the development, implementation, and continuous improvement of procedures, standards, documentation, and technical training programs.
• Identify emerging security, operational, and access-management risks and recommend appropriate solutions.
• Provide technical recommendations to management when matters require broader policy, organizational, or strategic decisions.
• 7/24 On Call for User Security and Access Team rotation.

Minimum Qualifications

• Nine (9) years of related experience, education/training, OR a Bachelor’s degree in related area plus five (5) years of related experience/training.
• Advanced interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization.
• Advanced experience using IT security systems and tools.
• Knowledge of department processes and procedures.
• Demonstrated skills applying security controls to computer software and hardware.
• Demonstrated skill at administering complex security controls and configurations to computer hardware, software and networks.
• Advanced knowledge of data encryption technologies and experience selecting and applying appropriate data encryption technologies.
• Advanced knowledge of IT security.
• Broad knowledge of other areas of IT.
• Demonstrated knowledge of secure hardware, software and network design techniques.
• Demonstrated skill at analyzing and preventing security incidents of high complexity.
• In-depth knowledge of computer hardware, software and network security issues and approaches.
• Advanced experience in incident response and digital forensics including reporting.

Preferred Qualifications

• 7+ years of progressively responsible experience in Identity and Access Management (IAM), Epic Security, information security, or enterprise access management.
• Advanced experience with Epic Security and enterprise identity platforms, such as SailPoint, Okta, Microsoft Entra ID, and Active Directory.
• Advanced knowledge of RBAC, least privilege, identity lifecycle management, access governance, provisioning, and security risk assessment.
• Demonstrated experience leading resolution of highly complex or high-impact access issues and developing secure, scalable solutions.
• Experience leading access governance, role/template optimization, audit remediation, process improvement, or automation initiatives, preferably in a healthcare environment.
• Demonstrated ability to serve as a technical SME, provide technical guidance and mentorship, and communicate recommendations to leadership and cross-functional stakeholders.
• Epic Security, IAM, or related security certification/training.

Skills

• Expert or highly advanced knowledge of Identity and Access Management (IAM)
• Epic security architecture and provisioning
• SailPoint, Okta, Microsoft Entra ID (Azure AD), and Epic Security
• Role-Based Access Control and least privilege
• Access governance and lifecycle management
• Security risk assessment
• Regulatory and compliance requirements
• Audit controls and remediation
• Enterprise provisioning strategies
• Process automation and standardization