Epic IAM & Security SME; L4; Hybrid in Plano, TX
Plano, Collin County, Texas, 75086, USA
Listed on 2026-09-12
-
IT/Tech
Cybersecurity, Information Security & Data Protection, IT Specialist, IT Support
Epic IAM & Security SME (L4) - Hybrid in Plano, TX
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization,
We are currently seeking a Epic IAM & Security SME (L4) - Hybrid in Plano, TX to join our team in Plano, Texas (US-TX), United States (US).
This is a hybrid role based in Plano, Texas
, with regular onsite presence required at the NTT DATA Headquarters for team collaboration, project planning, stakeholder engagement, and key operational activities. The role combines remote work with in-office participation to support effective cross-functional partnership and platform delivery.
Position Summary
We are seeking an experienced Epic IAM & Security Subject Matter Expert (SME) to provide advanced technical leadership and Level 4 support for Epic security, identity and access management (IAM), authentication, and integrations. This role is responsible for security architecture, complex troubleshooting, access governance, and ensuring secure, compliant access across the Epic ecosystem.
The ideal candidate will collaborate closely with Epic application teams, IAM, Cybersecurity, Infrastructure, Active Directory/Entra , and business stakeholders to deliver secure, scalable, and compliant solutions.
Key Responsibilities
Epic Security & Access Management
- Manage and support Epic security models, roles, profiles, classes, and access controls.
- Troubleshoot complex authentication, authorization, and user access issues.
- Support privileged and sensitive access management across Epic environments.
- Conduct access reviews and support audit and compliance activities.
- Implement least-privilege and segregation-of-duties controls.
Identity & Access Management (IAM)
- Integrate Epic with enterprise IAM solutions including Active Directory, Entra , SailPoint, Saviynt, Service Now, MFA, and SSO platforms.
- Support Joiner-Mover-Leaver (JML) processes and automated provisioning/deprovisioning.
- Troubleshoot identity synchronization, federation, and provisioning issues.
- Support and troubleshoot SSO, SAML, OAuth/OIDC, MFA, and federation services.
- Analyze authentication flows, certificates, tokens, and conditional access configurations.
- Resolve complex access and authentication incidents across interconnected systems.
Epic Integrations & Interoperability
- Support integrations between Epic and enterprise applications.
- Troubleshoot API, web service, HL7, and FHIR-based integrations.
- Coordinate resolution of interface and interoperability issues with technical teams.
Incident, Problem & Technical Leadership
- Lead resolution of critical P1/P2/P3 incidents.
- Perform root cause analysis (RCA) and implement preventive solutions.
- Serve as the highest technical escalation point for Epic IAM and Security issues.
- Mentor and provide guidance to L1-L3 support teams.
Architecture, Compliance & Automation
- Design and enhance secure IAM and access management solutions.
- Support HIPAA, ITGC, audit, and compliance requirements.
- Develop automation using Power Shell, REST APIs, and scripting technologies.
- Drive process improvements and operational efficiencies.
Required Qualifications
- 5+ years of experience in Identity & Access Management, Security Administration, or Healthcare IT Security.
- 3+ years of experience supporting Epic Security and Access Management.
- Hands-on experience with:
- Epic Security (Roles, Profiles, Security Classes, Access Controls)
- Microsoft Active Directory & Entra
- SSO, SAML, OAuth/OIDC, MFA, and Federation Services
- IAM/IGA platforms such as SailPoint or Saviynt
- Service Now integration and workflow processes
- Experience supporting automated provisioning and JML processes.
- Strong troubleshooting skills across access, identity,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).