Identity and Access Administrator in Schenectady, New York at Ellis Medicine

Working independently, the Identity and Access Administrator is responsible for provisioning, modifying, and deprovisioning user accounts across enterprise systems and for administering the organization’s Identity and Access Management (IAM) platform, security group memberships, and clinical system access. This role executes role-based access provisioning driven by HR records, supports system-specific access across clinical and business applications, builds provider and non-employee/contractor profiles following credentialing and confidentiality requirements, and ensures secure access management, compliance with organizational policies, and efficient delivery of messaging and collaboration services.

EDUCATION AND EXPERIENCE REQUIREMENT(S)

Required

• Associate’s degree in Information Technology, Management of Information Systems, or a related field; or

• Three or more years of experience administering Active Directory and/or managing the user account lifecycle and IAM role-based provisioning.

PHYSICAL REQUIREMENTS

Ability to perform the essential functions of the position, with or without reasonable accommodation, in accordance with organizational requirements.

PRIMARY RESPONSIBILITIES OF THE POSITION

User Provisioning and Deprovisioning

• Creates, modifies, disables, and removes user accounts based on approved requests, managing employee onboarding, transfers, and offboarding account activities.

• Processes new-hire and role changes originating in HR systems, updating access when HR changes a user’s role.

• Builds and maintains role-based access using IAM role templates, such as RN, PCT, and physician templates, so users receive standard access appropriate to their job role.

• Ensures accurate user attribute management, account lifecycle administration, and compliance with access governance and security policies.

• Troubleshoots account access and authentication issues.

Access Request and Authorization Governance

• Processes extended or non-standard access requests, such as finance access and appointment management.

• Handles one-off and miscellaneous access changes while maintaining proper authorization controls.

• Routes requests for access outside standard roles to the appropriate manager or director for approval before processing in IAM.

Provider and External/Contractor Access

• Builds provider access upon EHIS credentialing notifications from the Medical Staff Office, using IAM templates and specialty folders.

• Supports external and business-arrangement practices that allow credentialed providers to access systems, coordinating with staff who maintain approved-practice lists.

• Creates non-employee profiles for external credentialed providers and contractors after required confidentiality forms and paperwork are received and validated.

Security Group and Access Management

• Creates, modifies, and manages security and distribution groups and reviews group memberships according to business requirements.

• Manages shared calendar access through group membership and performs periodic access audits and certification reviews.

• Implements role-based access controls (RBAC) and ensures least-privilege access principles are followed.

Terminations and Disablement

• Disables accounts across Active Directory, IAM, Cerner, and other systems upon receipt of HR termination lists.

IAM Role Template Maintenance

• Maintains and updates IAM role templates to add or remove access groups as business needs evolve, applying specialized knowledge to modify templates and manage groups not always visible within IAM.

Documentation and Support

• Documents procedures, standards, and technical configurations and provides Tier 2/3 support for identity and messaging-related incidents and requests.

• Collaborates with Security, Infrastructure, HR, the Medical Staff Office, and Application teams and participates in system upgrades, migrations, and projects.

• Adheres to established department security policies and follows procedures in addressing security violations.

Ellis Medicine is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to, and will prohibit, discrimination on the basis of race, creed, color, religion, sex/gender (including pregnancy), age, national origin, disability (including pregnancy-related conditions), genetic information, predisposition or carrier status, military or veteran status, prior arrest or conviction record, marital or familial status, sexual orientation, transgender status, gender identity, gender expression, reproductive health decisions, domestic violence victim status, known relationship or association with any member of a protected class, and any other characteristic protected by applicable law violates federal, state and, where applicable, local laws , reproductive health decisions or source of payment, consistent with applicable legislation and to comply with the laws pertaining thereto.

Salary Range: $24.75-36.53 /hour Pay is based on experience, skills, and education. Exempt positions under the Fair Labor Standards Act (FLSA) will be paid within the base salary equivalent of the stated hourly rates. The pay range may also vary within the stated range based on location.