Lead IAM Business Applications Analyst

Job Description

Join one of the nation’s most comprehensive academic medical centers, UChicago Medicine, as a Lead IAM Business Applications Analyst. This position will be primarily a work from home opportunity with the requirement to come onsite as needed. You will need to be based in the greater Chicagoland area.       

This role will instruct, prioritize, and quality-check the work of other Identity and Access Management (IAM) analysts to ensure alignment with organizational objectives and industry best practices. Reporting to the IAM Manager, this position supports a healthcare-focused environment and is responsible for overseeing day-to-day IAM operations, including troubleshooting, issue resolution, and ensuring compliance with healthcare-specific regulations and organizational policies. The candidate will formulate and define IAM systems' scope and objectives based on user needs, a thorough understanding of IAM solutions, and security protocols. They will work extensively with IAM platforms such as SailPoint, Cyber Ark, and Epic to design and modify configurations and workflows, solving complex challenges and ensuring secure, efficient access management. Responsibilities include analyzing user and business needs, documenting them clearly, and translating them into precise IAM system specifications. The ideal candidate must possess deep technical expertise in IAM processes and systems while evaluating the business implications of applying IAM technologies to enhance security, operational efficiency, and compliance in the healthcare domain. In addition to leading IAM projects and initiatives, the candidate will serve as an indirect supervisor to the IAM Manager when required, ensuring continuity of leadership, effective team coordination, and consistent operational performance. 

Essential Job Functions  

• Overseeing Day to Day IAM Operations: Monitor, troubleshoot, and resolve IAM-related issues across systems such as SailPoint, CyberArk, and Epic. 

• Manage user provisioning, de-provisioning, and access request workflows. 

• Ensure compliance with healthcare-specific regulations (e.g., HIPAA) in daily operations. 

• Perform regular audits and reviews of user access to maintain security and compliance. 

• Designing & Modify IAM Configurations and Workflow: Develop and implement IAM workflows, role-based access control (RBAC), and privileged access management (PAM) policies.  

• Customize configurations in systems like SailPoint, CyberArk, and Epic to meet organizational needs.  

• Collaborate with stakeholders to define and refine IAM system requirements. 

• Instructing and Supervising IAM Analysts: Provide mentorship, prioritize tasks, and quality-check deliverables from IAM analysts. Act as an indirect supervisor to the IAM Manager when required, ensuring consistent leadership and decision-making.  

• Facilitate knowledge sharing and training sessions for team members. 

• Project Leadership and Strategic Initiatives: Lead IAM projects such as system implementations, upgrades, and integrations.  

• Collaborate with cross-functional teams to align IAM initiatives with organizational goals. Contribute to the development and execution of long-term IAM strategies. 

• Compliance and Security Oversight: Ensure IAM processes align with regulatory and compliance frameworks, including HIPAA, HITECH, and HITRUST. 

• Conduct risk assessments and implement controls to address vulnerabilities in IAM systems.  

• Stay informed of emerging security threats and recommend improvements to IAM protocols. 

Required Qualifications  

• Bachelor's degree in information technology, Cybersecurity, or a related field, or equivalent work experience. 

• Minimum of 7 years of experience in Identity and Access Management, preferably within a healthcare environment. 

• Hands-on experience with IAM platforms such as SailPoint, CyberArk, and Epic. 

• Strong understanding of IAM concepts, including access provisioning, role-based access control (RBAC), and privileged access management (PAM). 

• Proficiency in scripting or programming languages (e.g., PowerShell, Python, or Java) to support automation within IAM systems. 

• Familiarity with industry standards and compliance frameworks (e.g., HIPAA, HITECH, NIST, or HITRUST). 

• Certified in Epic security (desired but not mandatory) 

• Ability to analyze complex IAM workflows, identify issues, and implement solutions tailored to healthcare-specific requirements. 

• Experience in translating business and user needs into system requirements and effective IAM solutions. 

• Proven ability to lead and mentor teams, providing guidance on IAM best practices and ensuring high-quality deliverables. 

• Excellent verbal and written communication skills to collaborate with technical and non-technical stakeholders. 

• Demonstrated ability to manage day-to-day IAM operations, including troubleshooting and resolving system issues. 

• Experience leading IAM-related projects, including implementation, upgrades, and integrations, with a focus on healthcare technologies. 

• Relevant IAM or security certifications such as Certified Identity and Access Manager (CIAM), SailPoint Certified IdentityNow Engineer, CyberArk Defender, or CISSP. 

Preferred Qualifications  

• Healthcare-focused operational experience in business or clinical operations, healthcare research or healthcare teaching desired 

Position Details  

• Job Type / FTE: Full - Time   

• Shift: Days  

• Job Location: Hyde Park or Darien    

• Unit/Department: Identity and Access Management 

• CBA Code: Non-Union 

Why Join Us

We’ve been at the forefront of medicine since 1899. We provide superior healthcare with compassion, always mindful that each patient is a person, an individual. To accomplish this, we need employees with passion, talent and commitment… with patients and with each other. We’re in this together: working to advance medical innovation, serve the health needs of the community, and move our collective knowledge forward. If you’d like to add enriching human life to your profile, UChicago Medicine is for you. Here at the forefront, we’re doing work that really matters. Join us. Bring your passion.

UChicago Medicine is growing; discover how you can be a part of this pursuit of excellence at: UChicago Medicine Career Opportunities.

UChicago Medicine is an equal opportunity employer.  We evaluate qualified applicants without regard to race, color, ethnicity, ancestry, sex, sexual orientation, gender identity, marital status, civil union status, parental status, religion, national origin, age, disability, veteran status and other legally protected characteristics.

Must comply with UChicago Medicine’s COVID-19 Vaccination requirement as a condition of employment. If you have already received the vaccination, you must provide proof as part of the pre-employment process. This is in addition to your compliance with the Flu Vaccination requirement as well. Medical and religious exemptions will be considered consistent with applicable law. Lastly, a pre-employment physical, drug screening, and background check are also required for all employees prior to hire.

Compensation & Benefits Overview

UChicago Medicine is committed to transparency in compensation and benefits.  The pay range provided reflects the anticipated wage or salary reasonably expected to be offered for the position.

The pay range is based on a full-time equivalent (1.0 FTE) and is reflective of current market data, reviewed on an annual basis. Compensation offered at the time of hire will vary based on candidate qualifications and experience and organizational considerations, such as internal equity. Pay ranges for employees subject to Collective Bargaining Agreements are negotiated by the medical center and their respective union.

Review the full complement of benefit options for eligible roles at Benefits - UChicago Medicine.