Information Security Analyst II - Identity Management

In this role, you will support the development, implementation, and ongoing operation of Identity Governance and Administration (IGA) and Identity and Access Management (IAM) capabilities, including identity lifecycle management, access governance, provisioning and deprovisioning, access certifications, entitlement management, and application onboarding.

Trains and supports technical staff in UHS affiliated locations, where appropriate, to deploy, manage and support selected technologies. Oversees the technical aspects of tasks assigned to less experienced staff or contractors on projects, systems or applications assigned.

Key Responsibilities

• Support the implementation, administration, and ongoing operation of IGA/IAM capabilities, including identity lifecycle management, provisioning/deprovisioning, access requests, certifications, entitlement management, role-based access, and application onboarding.
• Analyze identity and access data, processes, workflows, and controls to identify inappropriate, excessive, orphaned, or unnecessary access and support remediation.
• Identify opportunities to improve identity governance and access management through stronger controls, automation, and improved joiner/mover/leaver processes.
• Collaborate with Identity Engineering, Cybersecurity, HR, Compliance, application owners, and business stakeholders on application onboarding, access models, workflows, and controls.
• Acts as the subject matter expert (SME) for at least one technology or process, and provides technical support and guidance to other team members.
• May oversee efforts of junior staff who assist with the assigned technology or process.
• Monitors the resolution of maintenance or enhancement issues assigned by the UHS Customer Support Center.
• Performs other duties as assigned/required.

Qualifications

• Bachelor’s degree required. Degree in Information Systems, Cybersecurity and Risk Management, Computer Science, or related field preferred.
• Minimum 3–5 years of experience in information security, identity and access management (IAM), identity governance, or related technology disciplines.
• Experience with or working knowledge of Identity Governance and Administration (IGA) and IAM concepts, including identity lifecycle management, joiner/mover/leaver processes, access provisioning and deprovisioning, access requests, access certifications/reviews, entitlement management, and role-based access control (RBAC).
• Experience configuring, managing and supporting some or all of the following or similar information security technologies or processes: Microsoft Active Directory and Entra ID or comparable enterprise identity platforms; Anti-malware protections and analysis; Web filtering and security; Vulnerability scanning and management; Encryption technologies for data at rest and data in transit; Mobile device and removable media protection or management systems; Authentication – including various forms of SSO and MFA; Cloud application security; Security Information and Event Management (SIEM) systems; Interpreting Common Vulnerabilities and Exposures (CVE) data; Device control; Data Loss Prevention (DLP); Forensic analysis.
• Familiarity with HR/HRIS or ERP-driven identity lifecycle processes and the use of authoritative identity sources for automated provisioning and deprovisioning.
• Working knowledge of various regulatory security requirements – particularly Sarbanes-Oxley (SOX), HIPAA, and HITECH.
• Working knowledge of common cyber security frameworks such as HITRUST, NIST, or others.
• Experience with PowerShell, APIs, scripting, workflow automation, or identity system integrations is a plus.
• Ability to prioritize multiple tasks and be detail oriented.
• An information security certification is a plus -- to demonstrate proficiency and knowledge of information security best practices and concepts.
• Excellent communication, interpersonal and project management skills.
• Travel to field locations may be necessary to complete assigned projects.