Identity/Access Management Analyst II (Information Technology)

Job Summary

The Identity/Access Management Analyst II is focused on identity management and is responsible for multiple aspects of managing the access required by the users of the organization. Facilitates the automation and timely completion of user provisioning processes and procedures, both from a technical and non-technical perspective. Responsible for the creation, modification and de-activation of accounts across multiple technology platforms, ensuring compliance with agreed upon SLA's with clients and customers while adhering to the governance and security practices that are part of the access and identity management lifecycle.

Job Specific Duties

• Performs service requests received through the helpdesk to facilitate timely resolution. Performs user provisioning and de-provisioning administration based on SLA turnaround time.
  
• Performs information security daily check list activities such as: user access reviews and re-certifications of user access as well as maintain and manage policy exception reports. 
  
• Maintains DNV, HIPAA, and regulatory processes and documentation. 
  
• Modifies, maintains, and/or develops IDM processes for all health system departments and users. Ensures they are aligned with NCH's strategies. 
  
• Participates in IT Security process improvement and continuous improvement initiatives; identifies areas where automation would be useful. 
  
• Ensures the integrity and confidentiality of access to designate corporate and customer applications, databases, servers, and other systems. 
  
• Oversees enforcement of policies and procedures for system security administration and user system access, based on industry-standard best practices.
  
• Plans, designs, and implements security design for new application and/or system implementations i.e. Identity and Access Management (IAM/IDM) solutions/workflows. 
  
• Collaborates with internal and external auditors on security issues, investigations, and routine reviews.
  
• Responsible for responding to inquiries regarding information security practices or security access. Troubleshoots complex application/system access issues & documents resolutions in helpdesk problem management database. 
  
• Provides customer service by supporting the end-user community with security-related issues; communicating & promoting security awareness to employees & providing 24 HR on-call support to end user.

Minimum Job Requirements

• Bachelor's Degree in Computer Sciences/ Information Systems/related major (OR) 4 years of relevant experience.  
  
• 1-3 years of experience administering and maintaining identity lifecycle processes, including provisioning, deprovisioning, and role-based access controls for enterprise users across various systems.
  
• 1-3 years of experience configuring and supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), and access control mechanisms using IAM tools such as Azure AD or SailPoint.
  
• 1-3 years of experience conducting regular access reviews, generating audit reports, and collaborating with compliance teams to meet security standards such as NIST or HIPAA, addressing any identified gaps in access control.

Knowledge, Skills, and Abilities

• IAM experience and/or implementation highly preferred.
  
• Working knowledge of Active Directory users and computers, Exchange Management Console and Exchange Administration Console, SharePoint, UNIX.
  
• SQL Query and stored procedures knowledge highly preferred.
  
• Strong interpersonal, communications and written skills.
  
• Ability to conduct research into security issues as required.
  
• Ability to work in a fast paced environment.
  
• Excellent customer service skills.
  
• Healthcare experience is highly desired.
  
• High level of analytical and problem-solving abilities as well as ability to communicate at different technical levels.
  
• Knowledge of applicable practices and laws relating to data privacy and protection.
  
• Able to define metrics, understand trends, and be able to automate as many processes as possible.
  
• Thorough understanding of Access Management and RBAC (Role-Based Access Control).
  
• Ability to produce, test, and validate automation techniques and specialties to improve technology and business processes.
  
• Understanding of user provisioning workflows and provisioning of identities within a healthcare organization.
  
• Practical experience with project delivery and systems development life cycles.
  
• Strong organizational skills and excellent attention to detail and due diligence.