Security Engineer (Epic) - San Juan, PR

UnitedHealth Group

11d

About The Position

Optum Insight is improving the flow of health data and information to create a more connected system. We remove friction and drive alignment between care providers and payers, and ultimately consumers. Our deep expertise in the industry and innovative technology empower us to help organizations reduce costs while improving risk management, quality and revenue growth. Ready to help us deliver results that improve lives? Join us to start Caring. Connecting. Growing together. As an Epic Security Engineer within the Identity Access Operations team, you will play a critical role in managing user access across both Epic applications and enterprise systems. You will oversee automated and manual provisioning processes, ensure compliance with organizational and regulatory requirements, and collaborate with technical, clinical, and operational stakeholders to maintain a secure and efficient access environment. Your responsibilities will include administering Epic Security structures such as templates, roles, security classes, and provider records, while also supporting enterprise identity operations.

Requirements

5+ years of IAM experience with hands-on Epic Security provisioning and administration
Proven solid understanding of IAM principles, especially in healthcare environments
Experience with Epic modules, security classes, roles, templates, SER/EMP management, and access troubleshooting
Experience with various identity and access management tools and systems
Proven excellent organizational and time management skills
Proven excellent problem-solving and analytical skills
Proven solid communication and interpersonal skills
Proficiency in data analysis tools and techniques (e.g., SQL, Python, R, Excel)
Fully Bilingual Spanish/English proficiency
Reside in Puerto Rico

Nice To Haves

Certifications in identity and access management or security
Experience with automated provisioning tools and workflows
Proven knowledge of industry standards and regulations related to access management (e.g., GDPR, HIPAA)

Responsibilities

Work with Optum Connect/OITPS Leaders to understand and define the Manual Access Provisioning objectives, commitments, roadmaps specific to each client as well as under managed services (shared teams)
Review and process access requests from users and departments. Validate the accuracy and completeness of request information
Ensure compliance with access control policies and procedures. Coordinate with relevant stakeholders to obtain necessary approvals
Manage access rights and privileges, including role-based access control (RBAC) and attribute-based access control (ABAC)
Review, validate, and process Epic access requests, ensuring accuracy and alignment with clinical, operational, and technical workflows
Create, modify, and retire Epic user access leveraging EMP, SER, ECL, LRP, and department-level configurations
Apply and maintain Epic user templates, roles, and security classes to ensure consistent Least Privilege access across the organization
Collaborate with Epic application teams to understand module-specific access requirements.
Conduct Epic access audits to identify unused entitlements, access drift, or misaligned permissions
Ensure compliance with internal access control policies and external regulations. Identify and address potential security risks related to access provisioning. Provide guidance and training to users and departments on access management best practices
Collaborate with IT teams, business units, and security departments to understand their access requirements
Build and maintain positive relationships with stakeholders. Provide timely and accurate information on access provisioning activities
Mentor a team of analysts, providing guidance, support. Assign tasks, monitor progress, and ensure deadlines are met. Foster a collaborative and productive work environment
Conduct in-depth data analysis to uncover insights and support decision-making. Utilize advanced analytical techniques and tools to extract meaningful information from large datasets