IAM Analyst

Reports to the Manager, IAM. This position supports IAM operations while leading large, complex, cross-functional initiatives involving identity, access, security, and enterprise applications. The role is responsible for coordinating work from planning through implementation, including defining deliverables, establishing timelines, coordinating resources and dependencies, tracking risks and issues, and driving work to completion.

The IAM Analyst works directly with technical teams, business and operational leaders, and executive stakeholders to coordinate enterprise initiatives and communicate status, decisions, risks, and required actions. The position partners closely with the Manager, IAM and Director, Identity to execute strategic IAM priorities and ensure alignment across participating teams.

In addition to leading large initiatives, the role maintains hands-on responsibility for IAM operations, including access administration, governance, lifecycle processes, issue resolution, process improvement, and related documentation. The IAM Analyst is expected to apply IAM expertise to both the execution of enterprise initiatives and the development of sustainable operational processes.

PRIMARY DUTIES

• Collaborate with security, technology, enterprise applications, and business teams on IAM initiatives and operational activities.

• Support and coordinate user provisioning, access modification, and termination across multiple systems and applications.

• Lead assigned IAM initiatives from planning through implementation, coordinating stakeholders, deliverables, timelines, dependencies, risks, and required decisions.

• Partner with the Manager, IAM and Director, Identity to execute enterprise IAM priorities and coordinate work across participating teams.

• Serve as a primary escalation point for complex or high-priority IAM issues and initiatives.

• Coordinate with Tier I and Tier II IAM teams to ensure operational activities, project deliverables, and established processes are completed accurately and on schedule.

• Perform QA reviews of IAM operations and ensure established processes and procedures are followed.

• Maintain IAM practices, processes, and procedures in alignment with organizational policy, security requirements, and regulatory obligations.

• Contribute to the development and implementation of identity governance policies and controls using IGA tools and technologies.

Technical Project Management and Process Improvement

• Lead assigned IAM initiatives from planning through implementation, including large and complex cross-functional efforts.
• Manage multiple concurrent initiatives while maintaining timelines, deliverables, dependencies, risks, issues, decisions, and stakeholder communications.
• Coordinate technical and business resources to ensure initiatives remain aligned with established objectives and delivery expectations.
• Provide regular status updates to IAM leadership and relevant operational and executive stakeholders, escalating risks, issues, and decisions when appropriate.
• Identify opportunities for process, technology, and operational improvements and develop actionable recommendations for IAM leadership.
• Develop and maintain standard operating procedures, requirements, processes, and other documentation needed to support IAM operations and initiative delivery.
• Facilitate working sessions and coordinate follow-up activities to ensure commitments and deliverables are completed.
• Support the transition of implemented solutions and processes into sustainable IAM operations.

• 3+ years of experience leading or coordinating technical projects, project management programs, or complex cross-functional initiatives.

• 3+ years of experience in access and data management, identity lifecycle management, or user provisioning; healthcare technology experience preferred.

• Experience working in a healthcare environment strongly preferred.

• Demonstrated experience coordinating complex work across technical, operational, and business stakeholders.

• Demonstrated ability to manage multiple concurrent initiatives with competing priorities, dependencies, and deadlines.

• Working knowledge of the security concepts and technologies described above.

• Must comply with all HIPAA rules and regulations.

PREFERRED QUALIFICATIONS

• Bachelor's degree in a related field or equivalent combination of education and experience preferred.

• Experience leading enterprise IAM, IGA, PAM, SSO, or identity lifecycle initiatives.

• Experience with SailPoint, Ping Identity, or comparable IAM/IGA platforms.

Cloud/SaaS

• Experience with user provisioning, identity lifecycle processes, and access administration in cloud environments such as Google Workspace or Microsoft 365.
• Experience with Google Workspace or Google Cloud is preferred.
• Experience supporting or implementing cloud identity and access initiatives across multiple teams or business functions is preferred.

IAM, IGA, and PAM

• Proficiency in identity lifecycle management and user access control, including onboarding, access changes, employee transfers, and offboarding.
• Experience developing and implementing access control strategies involving provisioning, deprovisioning, access modifications, and least-privilege requirements.
• Experience leading or coordinating IAM or IGA initiatives involving multiple applications, teams, stakeholders, and technical dependencies is preferred.
• Working knowledge of IAM solutions such as Okta, Ping Identity, or One Identity, as well as IGA solutions such as SailPoint or Saviynt, is preferred.

EHR/EMR

• Experience supporting user access and provisioning within an EHR, EMR, or practice management environment; athenaOne experience is preferred.
• Knowledge of creating, modifying, and terminating user profiles and access within an EHR, EMR, or practice management application.
• Experience supporting EHR or EMR access initiatives involving multiple operational or technical teams is preferred.

Applications, Databases, and Interfaces

• Working knowledge of security principles for three-tier application architectures.
• Working knowledge of cloud-based security architectures, including modern multi-cloud environments.
• Understanding of the differences between cloud-hosted applications and virtual desktop or application environments, such as Citrix or VDI.
• Strong spreadsheet skills using Excel or Google Sheets, including pivot tables, VLOOKUPs, and data analysis.

All your information will be kept confidential according to EEO guidelines.

The salary range for this role is $65,000.00 to $80,000.00 in base pay and exclusive of any bonuses or benefits (medical, dental, vision, life, and pet insurance, 401K, paid time off, and other wellness programs). This role is also eligible for an annual bonus targeted at 15%. The base pay offered will be determined based on relevant factors such as experience, education, and geographic location

Technical Requirements (for remote workers only, not applicable for onsite/in office work):

In order to successfully work remotely, supporting our patients and providers, we require a minimum of 5 MBPS for Download Speed and 3 MBPS for the Upload Speed. This should be acquired prior to the start of your employment. The best measure of your internet speed is to use online speed tests like . This gives you an update as to how fast data transfer is with your internet connection and if it meets the minimum speed requirements. Work with your internet provider if you have questions about your connection. Employees who regularly work from home offices are eligible for expense reimbursement to offset this cost.

Privia Health is committed to creating and fostering a work environment that allows and encourages you to bring your whole self to work. We understand that healthcare is local and we are better when our people are a reflection of the communities that we serve. Our goal is to encourage people to pursue all opportunities regardless of their age, color, national origin, physical or mental (dis)ability, race, religion, gender, sex, gender identity and/or expression, marital status, veteran status, or any other characteristic protected by federal, state or local law.