It Access Management Specialist

Description

IT Access Management Specialist

Information Technology

IT Support Manager

Full Time

The IT Access Management Specialist (Work location is in office) is a role responsible for carrying out day-to-day access administration for multiple user populations — employees, contractors, vendors, MSO clients, referring physicians, and patients. Working under the guidance of the IT Support Manager. You will help ensure each population receives appropriate, least privileged access in line with HIPAA and other regulatory obligations.

You will be the first point of contact for access-related requests from internal and external users, including physician offices. This role calls for attention to detail, discretion with PHI, and a service-minded approach. It provides hands-on training in identity and access management, healthcare compliance, and access governance.

User Populations Supported

• Employees — Internal systems, EHR/EMR, email, and collaboration tools; HR-driven joiner/mover/leaver lifecycle and role-based access.
• Contractors — Time-limited access to internal systems; sponsor required, with defined end dates and automatic expiration.
• Vendors — Application support, remote access, and third-party integrations; business associate agreements (BAAs), restricted scope, session monitoring, and periodic recertification.
• MSO Clients — Practice-level access to clinical imaging platforms.
• Referring Physicians —Self-service registration with identity proofing for Providers and office staff delegates.
• Patients — Self-service registration for patient portal.

• Create, modify, disable, and remove accounts and permissions per approved requests and documented procedures across Active Directory/Entra , clinical and business applications, referral portals, VPN, and SaaS platforms.
• Process access requests, confirming required approvals and applying least privilege and minimum necessary access; escalat? Actually the verb is "escalate" non-standard or high-risk requests to IT Support Manager.
• Carry out joiner/mover/leaver changes for employees and contractors based on HR notifications and sponsor requests.
• Track sponsors, end dates, and expirations for vendor and MSO client accounts, and process onboarding and offboarding steps.
• Support referring physician and practice staff onboarding.
• Provide first-line support for patient portal accounts, including account verification, lockouts, and recovery; route proxy access requests to the patient access and privacy teams.

• Assist with periodic access reviews by preparing reports, distributing them to reviewers, following up on responses, and documenting results.
• Flag orphaned, dormant, shared, or excessive accounts and process approved remediation.
• Confirm vendor BAAs and contractor agreements are on file before access is granted.
• Gather and organize audit evidence supporting HIPAA, HITRUST, SOC 2, and other frameworks.
• Assist with access log requests for privacy investigations.

• Apply MFA and password policies and help users with MFA enrollment and resets.
• Support privileged access processes, such as credential vault requests and vendor support accounts, under senior guidance.
• Review access-related alerts and elevate anomalies, such as unusual patient record access or vendor activity outside approved windows, to senior IAM or security staff.
• Follow segregation of duties, tenant isolation, and treatment-relationship rules when granting access.

• Serve as the first point of contact for access-related tickets from internal and external users, resolving within SLA or escalating as needed.
• Identify repetitive tasks that could be…