User Security & Access Analyst - Hybrid - 140760

About the role

The User Security & Access Analyst III is an experienced technical professional responsible for independently performing complex identity, access management, Epic security, and security administration activities. This position serves as a subject matter resource within assigned provisioning and security domains, manages complex access and security requests, and partners with application and operational teams to resolve issues while ensuring organizational security standards, policies, and procedures are followed.

Responsibilities

• Independently manage complex user access, provisioning, security, and account-related requests.
• Perform advanced Epic security administration, including analysis and maintenance of user access, roles, templates, and security configurations.
• Maintain and support SailPoint, Okta, Microsoft Entra ID (Azure AD), Active Directory, and related identity management integrations.
• Administer user access, role-based security, and provisioning processes while resolving access-related issues and supporting compliance requirements.
• Evaluate access requests to ensure appropriate access is provided based on business and job requirements.
• Troubleshoot complex access and security issues across multiple applications and systems.
• Apply established security policies, procedures, and standards when making access decisions.
• Identify inappropriate, excessive, duplicate, or conflicting access and recommend remediation.
• Collaborate with managers, application analysts, system owners, HR, IT, and operational teams to resolve access issues.
• Participate as a security subject matter expert on projects and system implementations.
• Support audits by gathering evidence, reviewing access, researching discrepancies, and assisting with remediation.
• Identify opportunities to improve existing processes, documentation, and workflows.
• Assist in the development, implementation, and continuous improvement of procedures, standards, documentation, and technical training programs.
• Assist with standardization and automation efforts within the analyst's area of responsibility.
• Provide technical guidance and knowledge sharing to team members as needed.
• Escalate high-risk, unprecedented, policy-related, or organizational-level decisions to appropriate leadership.
• 7/24 On Call for User Security and Access Team rotation.

Requirements

• Seven (7) years of related experience, education/training, OR a Bachelor’s degree in related area plus three (3) years of related experience/training.
• Basic skill at reading and interpreting security logs.
• Ability to follow department processes and procedures.
• Interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization.
• Experience using IT security systems and tools.
• Knowledge of data encryption techniques.
• Experience analyzing logs for security breaches.
• Knowledge of other areas of IT, department processes and procedures.
• Demonstrated skills applying security controls to computer software and hardware.
• Experience in incident response and digital forensics including data collection, examination and analysis.
• Demonstrated skill at administering complex security controls and configurations to computer hardware, software and networks.