Experience working in the healthcare industry with systems like EMRs (Electronic Medical
Records) or other clinical applications.
Knowledge of Active Directory, Azure AD, and cloud security best practices.
Familiarity with NIST Cybersecurity Framework and Zero Trust Architecture.
Knowledge, Skills, and Abilities
This role involves interaction and collaboration with other departments and requires
excellent judgment and interpersonal skills.
Deep knowledge of Identity Governance and Administration (IGA) concepts and practices,
including user lifecycle management, access certifications, segregation of duties, and access
risk remediation in regulated environments.
Strong skill in designing, implementing, and maintaining Role-Based Access Control (RBAC)
models.
Ability to integrate and manage access for SaaS, cloud, and on‑premise applications,
leveraging IGA platforms, SCIM-based provisioning, and standard authentication protocols
(e.g., SAML, OAuth, OIDC).
Working knowledge of healthcare and regulatory compliance requirements (e.g., HIPAA,
SOX, GDPR) as they relate to identity, access controls, audits, and access certification
programs.
Strong analytical and problem‑solving skills, with the ability to assess access risks, identify
gaps in IAM controls, and recommend practical, compliant improvements in a fast‑paced
environment.
Demonstrated ability to collaborate cross‑functionally, partnering effectively with IT,
People, Operations, Compliance, Finance, and application owners.
Effective communication and documentation skills, including the ability to clearly document
IAM processes, access models, and integrations, and to explain complex access governance
concepts to non‑technical stakeholders.
Ability to drive continuous improvement and automation, applying judgment and initiative
to enhance IAM efficiency, access accuracy, and governance maturity while supporting
secure customer care operations.
Essential Duties and Responsibilities
IGA Administration
Develop, implement, and maintain IGA frameworks, policies, and access controls.
Manage user lifecycle processes including provisioning, deprovisioning, role changes, and
terminations.
Implement and maintain RBAC models and RBAC-based provisioning rules for enterprise
and clinical applications, including EMRs.
Optimize IGA configurations and integrations with Okta, SailPoint, EMRs, and enterprise
applications.
Continuously improve IAM automation, access accuracy, and governance practices to
support secure patient care operations.
Compliance and Security
Ensure IAM compliance with applicable regulations, including HIPAA, SOX, and GDPR.
Design, deploy, and manage access certification campaigns for managers and application
owners in collaboration with GRC.
Support audits, access reviews, reporting, and remediation of access risks.
Apply Zero Trust security principles to protect critical systems and sensitive data.
Integration and Collaboration
Integrate IGA platforms with SaaS applications and cloud platforms (AWS, Azure, GCP)
using out-of-box connectors and SCIM-enabled integrations.
Partner with application owners to define access requirements and design appropriate
RBAC models.
Collaborate cross-functionally with IT, People, EMR, Operations, Finance, and Compliance
teams to support onboarding, role changes, and multi-market growth.
Documentation and Training
Maintain clear documentation for IAM processes, access models, integrations, and
configurations.
Provide guidance and training to stakeholders on IAM best practices and access governance.
GoHe
Benefits
Health insuranceVision insurance
Additional Information
You're more valuable than ever - And that's just how we'll make you feel.
Job Summary
The Senior Access Management Analyst is responsible for managing and enhancing our Identity
Governance and Administration (IGA) processes. This role ensures secure, compliant, and efficient
access to critical systems across the Company and our network of urgent care centers. The Senior
Access Management Analyst will collaborate with teams across the Company such as urgent care
center teams, Operations, People, Finance and IT to maintain a secure and efficient identity and
access management (IAM) framework, supporting multi-market onboarding and application specific access management needs.