General Network and Enterprise-Wide Application, File & Account Access Administration

Following pre-defined SOP’s, HIPAA guidelines and OHSU policies, create, process, manage, disable or terminate user accounts, and system accounts for: OHSU Enterprise level and Health Care Partner, where applicable, access as controlled and maintained by ITG:

• Implement Enterprise and core application user access requests by creating client access accounts within service level agreements. Communicate with the customer to clarify requests, suggest alternate solutions within ITG policies and guidelines and handle non-standard access requests.
• Create /Modify non-standard Active Directory users and groups. Examples include privileged accounts, function code pagers, etc.
• Create/Modify Active Directory User objects for application service accounts, auto-log on workstations, and other non-user network accounts.
• Create/Modify Active Directory groups for managing user access to applications, systems, and other resources. Configure identity management system entitlements when applicable.
• Assist in setting up secure departmental file shares. Understand and apply inherited and explicit rights filters to these shares. Set up DFS mounts and tie NTFS file shares to those domain controlled name spaces using OHSU provided technology.
• Create /Modify Exchange objects such as shared mailboxes, distribution lists, and resources.
• Manage and understand the security role of data stewards for AD groups, entitlements, Exchange objects, X drive access groups, and other objects.
• Utilize ITG standard technology used to track reported incidents.
• Manage and resolve complex customer access issues.
• Provide for change management of operational procedures.
• Provide tier-2 access issue support for ITG departments and direct OHSU user base when applicable.
• Utilize ITG standard means of communication technology to act as a Subject Matter Expert in support of tier-1 inquiries.
• Lead, coordinate, and participate in key process improvements for account management processes that positively impact customer service delivery.
• Provide the highest degree of data security and integrity through diligence and daily monitoring; provide analysis of security issues and make recommendations for resolution.
• Provide for implementation of confidential access requests discretely and in accordance with all applicable policies
• Create audits for account inactivity across all systems and expire per service level agreement.
• Provide complete, timely and accurate documentation describing access provisioning using current administrative tools.
• Participate in system testing during upgrades or maintenance windows for DIA supported technologies.

Oracle Production (FISPRD) and Oracle Development Account Administration

• Create, process, manage, disable or terminate Oracle Production access and accounts for –HRE, LD, and Oracle User Accounts.
• Participate in system testing during Oracle upgrade cycles or related patches and minor issues, when required
• Participate in development testing in preparation for Oracle upgrades, or as requested for patches and other issue resolution, when required.
• Audit account access, inactivity & roles versus responsibilities
• Work with the Oracle team to update, test, maintain and support the Oracle access web site
• Provide complete, timely and accurate Oracle documentation describing access provisioning using current administrative tools.

Routine Operations:

• Attend meetings as needed to represent account administration issues in research and development of new projects, which include account administration components.
• Escalate potential customer service impacts to management including technical, customer service oriented or potential business work flow impacts i.e., nearing the SLA threshold, nearing AD user count threshold, unexpected downtimes, unexpected spike in account requests
• Gather, assess, and provide information to be used to report on standardized performance metrics.
• Participate in planning and execution of education efforts for target OHSU customer base.
• Work with technical teams to ensure integration of new or revised tools and methods used by DIA to meet appropriate levels of security and operability.
• Participate in training efforts to ensure Key Performance Indicators and established metrics for DIA are consistently met.
• Write and disseminate new or updated documentation pertaining to account access procedures to be utilized by ITG or end user customers.
• Assist in creating scripts or utilizing other means of technology to assist in automating processes. Create queries to run against the file shares, users and groups to provide accurate reporting and auditing.

Other Duties as Assigned

Experience:

• Experience with Enterprise account administration (AD User and Group Administration, Microsoft Exchange, Microsoft Active Directory Administrator, etc.)
• Customer facing service experience.
• Experience with User Account and Access Management, including standard user and privileged access.
• Experience using IT Service Management Software such as Jira or ServiceNow.
• Proven experience developing and utilizing complex queries utilizing IT focused reporting tools.
• Operational experience in the following operating systems: Windows 11, Server 2022.

Job Related Knowledge, Skills and Abilities (Competencies):

• Familiarity with identity management principals (e.g. joiner, mover, leaver, RBAC, etc.)
• Proficiency working in Active Directory utilizing knowledge of user account and access management in support of operational processes.
• Proficiency working with Active Directory management tools such as Active Directory Users and Computers.
• Understanding of AD and file/directory permissions related to security for Microsoft Operating Systems.
• Proven abilty to troubleshoot complex AD user, group, and Exchange objects and related access issues.
• Proficient in using Microsoft Office including Outlook email.
• Proven skills in process/work-flow analysis.
• Proven ability to accurately accomplish detailed data entry.
• Proven ability to create accurate and concise documentation.
• Ability to use graphic visualization tools.
• Possess core communication skills: active listening, paraphrasing, attention to non-verbal language.
• Proven organizational and prioritizing skills.
• Demonstrated use of proper decision making within set parameters.
• Ability to communicate complex technical issues with technical staff for troubleshooting and remediation.
• Ability to communicate effectively with customers who may have a limited knowledge of computer systems operations and access required.

• Experience in a healthcare or university environment.
• Experience in Account Administration, including Oracle, in a large scale network environment.
• Experience with process automation with PowerShell or other programming/scripting technologies
• Experience with Identity Management joiner, mover, leaver actions, and role-based access.
• Demonstrated experience with SharePoint and Jira Forms.
• Experience with OneIdentity ActiveRoles.
• Understanding and experience in ITIL or other service management frameworks.
• Experience providing tier-1 or tier-2 IT support for Enterprise organizations in a large scale environment.
• Understanding of compliance standards for regulatory agencies such as FERPA and HIPAA.
• Working knowledge of Powershell or other scripting languages.
• Understanding of process automation and managing AD and Exchange objects.
• Working knowledge of code revision control and change management.
• Advanced-user level proficiency with Windows Server administration and configuration, and application administration and configuation.