The Epic Security Certified Administrator is responsible for designing, implementing, and maintaining user access controls within the Epic electronic health record (EHR) system. This role ensures users have appropriate security rights and access levels in accordance with organizational policies, regulatory requirements, and security best practices. The administrator works closely with clinical, operational, and IT teams to support secure workflows, troubleshoot access issues, and manage Epic security architecture across the enterprise. This position is a 100% remote position within USA
Key Duties and Responsibilities
• Configure and maintain user security classes, roles, sub roles, templates, and profiles within Epic.
• Manage onboarding, offboarding, and changes to user access in alignment with HR processes and compliance standards.
• Monitor and audit user access to ensure adherence to internal policies and external regulatory requirements (HIPAA, audit controls, etc.).
• Troubleshoot and resolve securityrelated issues, including user access errors, role conflicts, and workflow permission problems.
• Collaborate with application teams, clinical leaders, and IT security to design secure workflows and support rolebased access practices.
• Maintain documentation on Epic security standards, processes, and configuration guidelines.
• Participate in system upgrades, enhancement planning, and testing to ensure security settings remain functional and compliant.
• Support authentication and identitymanagement processes, including integration with Active Directory, SSO, and MFA platforms.
• Conduct periodic access reviews and assist with internal or external audits.
• Provide guidance and training to IT staff and endusers related to Epic security concepts and procedures.
Required Qualifications
• Epic Security Certification (current or obtained within required organizational timeframe).
• Experience administering Epic security or Epic user access in a healthcare environment.
• Understanding of Epic’s security model (roles, templates, security classes, profiles).
• Knowledge of HIPAA privacy and security regulations.
• Strong analytical and problemsolving skills.
• Ability to collaborate with multidisciplinary teams, including clinical, operational, and technical stakeholders.
• Excellent attention to detail and ability to manage complex security configurations.
Preferred Qualifications
• Experience with identity and access management (IAM) systems.
• Familiarity with Active Directory, rolebased access control (RBAC), and security best practices.
• Prior clinical or healthcare IT experience.
• Experience with Epic user provisioning automation or scripting (where permitted).
• Strong documentation and workflow design skills.
