Epic Security Analyst II

Position Summary

Department:
Information Technology
Status:
Full-Time

Shift: Monday - Friday, 8am-5pm, hybrid (2x a week onsite) in Orlando, FL
On Call Required*

All Inclusive Benefits (start day one)

• Student loan repayment, tuition reimbursement, FREE college education programs, retirement savings, paid paternity leave, fertility benefits, backup elder and childcare, pet insurance, PTO/Holidays, and more for full‑time and part‑time employees.

Forbes Recognizes Orlando Health as a Best-In-State Employer

• Forbes has named Orlando Health as one of America's Best-In-State Employers for 2024. Orlando Health is the top healthcare organization in the Metro Orlando area to make the prestigious list. "We are proud to be named once again as a best place to work," said Karen Frenier, VP (HR). "This achievement reflects our positive culture and efforts to ensure that all team members feel respected, supported and valued."

Employee-centric

• Orlando Health has been selected as one of the "Best Places to Work in Healthcare" by Modern Healthcare.

Under the direction of the Manager, Identity Access Management and in support of the chief information security officer (CISO) and Orlando Health organizational business units, the Epic Security Analyst II will provide consultation and guidance to the development, internal application and technical teams, and the third‑party Epic EMP/SER provisioning vendor to maintain optimal protocols for granting and revoking appropriate end‑user access for supported applications.

The Epic Security Analyst II will be responsible for the administration and coordination of all tasks related to SER, security tools, and policies and processes for Epic. This position provides outstanding client service and must be highly knowledgeable about policies, procedures, and business operations.

• Establish Epic security protocols, in consultation with appropriate organizational stakeholders, and maintain the security of the Epic application.
• Understand the foundational structures of Epic software, including profiles, roles, menus, and security classes, as well as network and device security relating to Epic and Epic end users.
• Perform daily Epic security administration functions, including managing customer access requests, creating and/or deleting user profiles and accounts, maintaining appropriate documentation, and monitoring and auditing access logs.
• Perform provider import/build as needed, and cross‑referencing user lists.
• Within the Epic system, develop, manage, and maintain standard security configuration, security classes, and templates, security class ownership, blueprints, and provisioning/deprovisioning of application security levels and roles.
• Work with Epic application teams to design system‑level access, such as logout times, and lead decisions related to ownership and change delegation guidelines.
• Takes ownership on process improvement in Epic Security provisioning, monitoring, and auditing.
• Provide day‑to‑day troubleshooting, analysis, and resolution related to provider record issues.
• Work with Epic project representatives to complete design, build, and testing tasks in accordance with the project plan.
• Identify issues that arise within security and provider configuration as well as issues that affect other application teams, and work to reach resolution.
• Build and maintain Knowledge Base, and any other Epic Security related process, procedures, and policies.
• Identify and implement requested changes to the system.
• Maintain effective communication with the Information Services Security Risk and Compliance Team and be able to understand business needs and security concerns and communicate effectively to management.
• Develop own and manage all other user and provider standards and processes and associated documentation. This position requires strong collaboration with credentialing and provider management functions.
• Coordinate with Epic Hosting Team and support technical teams.
• Takes lead on implementation, including but not limited to presentations, Q&As, policies, coordination of training.
• Oversee testing, follow up with stakeholders.
• Maintain regular…