IT Access Management Specialist

Job Title

IT Access Management Specialist

Department

Information Technology

Reports to

IT Support Manager

Status

Full Time

Position Summary

The IT Access Management Specialist (Work location is in office) is a role responsible for carrying out day-to-day access administration for multiple user populations — employees, contractors, vendors, MSO clients, referring physicians, and patients. Working under the guidance of the IT Support Manager. You will help ensure each population receives appropriate, least privileged access in line with HIPAA and other regulatory obligations.

You will be the first point of contact for access-related requests from internal and external users, including physician offices. This role calls for attention to detail, discretion with PHI, and a service-minded approach. It provides hands-on training in identity and access management, healthcare compliance, and access governance.

Responsibilities

User Populations Supported

• Employees — Internal systems, EHR/EMR, email, and collaboration tools; HR-driven joiner/mover/leaver lifecycle and role-based access.
• Contractors — Time-limited access to internal systems; sponsor required, with defined end dates and automatic expiration.
• Vendors — Application support, remote access, and third-party integrations; business associate agreements (BAAs), restricted scope, session monitoring, and periodic recertification.
• MSO Clients — Practice-level access to clinical imaging platforms.
• Referring Physicians —Self-service registration with identity proofing for Providers and office staff delegates.
• Patients — Self-service registration for patient portal.

Account & Access Administration

• Create, modify, disable, and remove accounts and permissions per approved requests and documented procedures across Active Directory/Entra ID, clinical and business applications, referral portals, VPN, and SaaS platforms.
• Process access requests, confirming required approvals and applying least privilege and minimum necessary access; escalate non-standard or high-risk requests to IT Support Manager.
• Carry out joiner/mover/leaver changes for employees and contractors based on HR notifications and sponsor requests.
• Track sponsors, end dates, and expirations for vendor and MSO client accounts, and process onboarding and offboarding steps.
• Support referring physician and practice staff onboarding.
• Provide first-line support for patient portal accounts, including account verification, lockouts, and recovery; route proxy access requests to the patient access and privacy teams.

Governance & Compliance

• Assist with periodic access reviews by preparing reports, distributing them to reviewers, following up on responses, and documenting results.
• Flag orphaned, dormant, shared, or excessive accounts and process approved remediation.
• Confirm vendor BAAs and contractor agreements are on file before access is granted.
• Gather and organize audit evidence supporting HIPAA, HITRUST, SOC 2, and other frameworks.
• Assist with access log requests for privacy investigations.

Security & Monitoring

• Apply MFA and password policies and help users with MFA enrollment and resets.
• Support privileged access processes, such as credential vault requests and vendor support accounts, under senior guidance.
• Review access-related alerts and escalate anomalies, such as unusual patient record access or vendor activity outside approved windows, to senior IAM or security staff.
• Follow segregation of duties, tenant isolation, and treatment-relationship rules when granting access.

Support & Process Improvement

• Serve as the first point of contact for access-related tickets from internal and external users, resolving within SLA or escalating as needed.
• Identify repetitive tasks that could be automated and assist with basic scripts and workflows.
• Work with HR, Privacy, Compliance, application owners, vendor managers, MSO account teams, and physician liaison teams.

Specific Job Knowledge, Skill, and Ability

• Strong attention to detail and ability to follow documented procedures accurately
• Clear written and verbal communication skills, including with non-technical users and physician office staff
• Discretion with PHI and sensitive information
• Service-minded toward internal and external users, including physician offices
• Ability to manage multiple requests and meet SLAs
• Willingness to learn and take direction

Minimum Education and Experience –

• 0–2 years of experience in IT help desk, desktop support, systems administration, or a related role (internships and relevant coursework count).
• Basic familiarity with Active Directory, Entra ID, or similar directory services, or demonstrated ability to learn quickly.
• Basic understanding of least privilege and why access controls matter.
• Experience with ticketing tools (e.g., ServiceDesk, ServiceNow) or comparable systems.

Preferred Qualifications –

• Associate’s or bachelor’s degree in IT, Cybersecurity, or a related field (or equivalent experience).
• Healthcare or other regulated-industry experience, or awareness of HIPAA privacy and security basics.
• Exposure to IAM platforms (Okta, SailPoint, Entra ID Governance) or EHR/EMR access models (e.g., Intelerad, Fuji RIS, Epic, Cerner, or comparable systems).

Among the many benefits of a career with Southwest Medical Imaging, are the following:

• Medical, Dental & Vision Coverage
• Health Savings Accounts (HSA-available if enrolled in a high-deductible plan)
• Flexible Spending Accounts (FSA)
• Dependent Care Reimbursement Accounts (DCRA)
• Employee Assistance Program (EAP available if enrolled in Health plan)
• 401(k) retirement plan
• Paid Time Off (PTO)
• Company Paid Basic Life & AD&D Insurance
• Voluntary Life Insurance
• Voluntary Short Disability 
• Company Paid Long-Term Disability
• Pet Discount Program
• 6 paid Company Holidays 
• Floating Holiday, Jury Duty & Bereavement Leave
• Tuition Reimbursement
• Competitive Salary
• Leadership Mentoring Opportunities

Physical Requirements

While performing the duties of this Job, the employee is regularly required to sit; use hands to finger, handle, or feel; reach with hands and arms; and talk or hear. The employee is frequently required to stand and walk. The employee is occasionally required to lift and/or move up to 50 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, and the ability to adjust focus.