IT ACCESS MANAGEMENT SPECIALIST

SOUTHWEST MEDICAL IMAGING•Scottsdale, AZ

7d•Onsite

About The Position

The IT Access Management Specialist performs day-to-day access administration for employees, contractors, vendors, MSO clients, referring physicians, and patients. This in-office role works under the guidance of the IT Support Manager and helps ensure users receive appropriate, least-privileged access in line with HIPAA and other regulatory obligations. The specialist is the first point of contact for access-related requests from internal and external users, including physician offices. The position requires attention to detail, discretion with protected health information (PHI), and a service-minded approach, and provides hands-on training in identity and access management, healthcare compliance, and access governance. The role administers accounts and permissions across directory services, clinical and business applications, referral portals, VPN, and SaaS platforms. It supports identity lifecycle processes, access reviews, audit evidence gathering, security monitoring, MFA, privileged-access processes, and first-line access support. The specialist also works with HR, Privacy, Compliance, application owners, vendor managers, MSO account teams, and physician liaison teams.

Requirements

0–2 years of experience in IT help desk, desktop support, systems administration, or a related role; internships and relevant coursework count.
Basic familiarity with Active Directory, Entra ID, or similar directory services, or demonstrated ability to learn quickly.
Basic understanding of least privilege and why access controls matter.
Experience with ticketing tools such as ServiceDesk or ServiceNow, or comparable systems.
Strong attention to detail and ability to follow documented procedures accurately.
Clear written and verbal communication skills, including communication with non-technical users and physician office staff.
Discretion with PHI and sensitive information.
Service-minded approach toward internal and external users, including physician offices.
Ability to manage multiple requests and meet SLAs.
Willingness to learn and take direction.

Nice To Haves

Associate’s or bachelor’s degree in IT, Cybersecurity, or a related field, or equivalent experience.
Healthcare or other regulated-industry experience, or awareness of HIPAA privacy and security basics.
Exposure to IAM platforms such as Okta, SailPoint, or Entra ID Governance, or to EHR/EMR access models such as Intelerad, Fuji RIS, Epic, Cerner, or comparable systems.

Responsibilities

Create, modify, disable, and remove accounts and permissions across Active Directory/Entra ID, clinical and business applications, referral portals, VPN, and SaaS platforms.
Process access requests, verify required approvals, apply least privilege and minimum necessary access, and escalate non-standard or high-risk requests to the IT Support Manager.
Carry out employee and contractor joiner, mover, and leaver changes based on HR notifications and sponsor requests.
Track sponsors, end dates, and expirations for vendor and MSO client accounts, and process onboarding and offboarding steps.
Support onboarding for referring physicians and practice staff.
Provide first-line support for patient portal accounts, including account verification, lockouts, and recovery; route proxy access requests to patient access and privacy teams.
Assist with periodic access reviews by preparing reports, distributing them to reviewers, following up, and documenting results.
Flag orphaned, dormant, shared, or excessive accounts and process approved remediation.
Confirm vendor business associate agreements (BAAs) and contractor agreements are on file before granting access.
Gather and organize audit evidence supporting HIPAA, HITRUST, SOC 2, and other frameworks.
Assist with access log requests for privacy investigations.
Apply MFA and password policies and assist users with MFA enrollment and resets.
Support privileged-access processes, including credential vault requests and vendor support accounts, under senior guidance.
Review access-related alerts and escalate anomalies, such as unusual patient record access or vendor activity outside approved windows, to senior IAM or security staff.
Follow segregation-of-duties, tenant-isolation, and treatment-relationship rules when granting access.
Serve as the first point of contact for access-related tickets, resolving them within SLA or escalating as needed.
Identify repetitive tasks that could be automated and assist with basic scripts and workflows.
Work with HR, Privacy, Compliance, application owners, vendor managers, MSO account teams, and physician liaison teams.