Epic Security and Access Analyst II

University of Texas at Austin•Austin, TX

1d•Onsite

About The Position

This position supports Epic security administration, access provisioning, and role-based security design across clinical and business systems. The role works closely with Epic, Identity and Access Management (IAM), Human Resources, Compliance, and operational teams to ensure secure, compliant, and efficient access management processes. The Epic Security and Access Analyst II is responsible for the administration, optimization, and support of Epic security access and role-based configurations across clinical and business systems. This role ensures appropriate access provisioning, role design integrity, and compliance with HIPAA, organizational policies, and Epic security standards while serving as a key operational contributor and escalation resource.

Requirements

Bachelor’s degree in Information Technology, Health Informatics, Business, or a related field
Three years of experience supporting Epic security administration or access provisioning
Experience working in a healthcare or highly regulated environment
Familiarity with Identity and Access Management (IAM) systems and compliance frameworks
Experience supporting user provisioning, role assignments, and access management processes
Knowledge of security governance, compliance, and audit requirements
Functional/Technical Skills: Applies Epic security concepts such as user roles, security classes, and access templates. Utilizes ticketing and access management systems effectively. Learns system functionality and workflows quickly. Demonstrates working knowledge of Epic security administration principles.
Attention to Detail: Reviews access requests thoroughly before processing. Detects discrepancies in user permissions and security assignments. Maintains precise documentation and audit records.
Problem Solving: Identifies causes of access issues and resolves them efficiently. Escalates issues appropriately when they exceed scope or authority. Applies troubleshooting techniques systematically to resolve security and access concerns.
Informing: Communicates clearly with users regarding access requests and status updates. Documents processes, procedures, and changes effectively. Provides timely updates to stakeholders and team members.
Learning on the Fly: Adapts to Epic updates, security enhancements, and new workflows. Seeks knowledge to improve technical and operational skills. Applies newly acquired knowledge to daily responsibilities.
Peer Relationships: Collaborates effectively across technical, operational, and clinical teams. Maintains positive working relationships with stakeholders and colleagues. Supports team objectives and shared organizational goals.
Relevant education and experience may be substituted as appropriate.

Nice To Haves

Bachelor’s degree in Information Technology, Health Informatics, Business, or a related field
Four years of experience supporting Epic security administration or access provisioning
Experience working in a healthcare or highly regulated environment
Familiarity with Identity and Access Management (IAM) systems and compliance frameworks
Experience supporting Epic security role design, maintenance, and optimization
Experience supporting audit readiness and compliance activities
Epic Security Certification (or obtained within six months of hire)
CompTIA Security+ Certified Identity and Access Manager (CIAM) or similar certification
ITIL Foundation Certification

Responsibilities

Supports Epic Access Provisioning and Identity Workflows: Support Epic provisioning and deprovisioning workflows for user access. Process onboarding, transfer, and offboarding access requests in alignment with Human Resources and compliance requirements. Assign roles, security classes, and user templates based on job function. Ensure timely and accurate request fulfillment in accordance with established service level agreements (SLAs).
Maintains Security Roles, Templates, and Design: Maintain and update Epic security roles, profiles, and templates. Assist in role design and standardization efforts. Validate alignment between security roles and organizational structure. Identify opportunities to improve role efficiency and compliance.
Supports Audits and Compliance Activities: Assist with audits and compliance reviews related to Epic access. Review audit reports to identify inappropriate or excessive access. Document findings and support remediation activities. Ensure adherence to HIPAA, internal policies, and regulatory requirements.
Troubleshoots Epic Security and Access Issues: Troubleshoot Epic access and security issues impacting users and workflows. Investigate root causes of access problems and implement solutions. Collaborate with application, IT, and IAM teams for issue resolution. Escalate complex issues to senior analysts as appropriate.
Supports Change Management and Epic Upgrades: Participate in Epic upgrade and testing activities impacting security. Validate access roles and configurations in non-production and production environments. Support change control processes and system updates. Document changes and ensure system integrity.
Maintains Documentation and Process Standards: Maintain security documentation and standards for Epic environments. Update procedures, job aids, and process documentation. Ensure documentation supports audit readiness and operational continuity. Promote adherence to established security governance practices.
Collaborates with IAM, Operational, and Technical Teams: Collaborate with IAM and operational teams to ensure aligned access management processes. Work closely with Human Resources, Compliance, and clinical teams on access needs. Support cross-functional workflows related to identity lifecycle management. Contribute to process improvements and standardization initiatives.
Participate in periodic access recertification and compliance campaigns.
Support emergency access provisioning and downtime procedures.
Assist with testing new Epic modules or enhancements impacting security.
Provide guidance and informal coaching to Analyst I team members.
Support after-hours upgrades or critical incident response as needed.
Adhere to internal controls and reporting structure.
Perform related duties as assigned.