Information Security Analyst II - Identity Management

Drive identity governance and access management operations, from lifecycle workflows to access controls and application onboarding.

Responsibilities

• Support implementation, administration, and ongoing operation of Identity Governance and Administration (IGA) and Identity and Access Management (IAM) capabilities.
• Manage identity lifecycle workflows, including provisioning and deprovisioning, access requests, access certifications/reviews, and entitlement management.
• Administer role-based access control (RBAC), including access governance and role/access models.
• Analyze identity and access data, processes, workflows, and controls to detect and remediate inappropriate, excessive, orphaned, or unnecessary access.
• Identify opportunities to strengthen identity governance through improved controls, automation, and better joiner/mover/leaver processes.
• Collaborate with Identity Engineering, Cybersecurity, HR, Compliance, application owners, and business stakeholders on onboarding, access workflows, and access controls.
• Serve as a subject matter expert (SME) for at least one technology or process and provide technical support and guidance to team members.
• May oversee efforts of junior staff supporting the assigned technology or process.
• Monitor resolution of maintenance or enhancement issues assigned by the UHS Customer Support Center.
• Perform other duties as assigned or required.

Requirements

• Bachelor’s degree required.
• Minimum 3–5 years of experience in information security, identity and access management (IAM), identity governance, or related disciplines.
• Working knowledge of IGA and IAM concepts, including:
  • Identity lifecycle management and joiner/mover/leaver processes
  • Provisioning and deprovisioning
  • Access requests and access certifications/reviews
  • Entitlement management
  • Role-based access control (RBAC)
• Experience configuring, managing, and supporting enterprise identity platforms such as Microsoft Active Directory and Entra ID (or comparable platforms).
• Experience supporting security capabilities including:
  • Anti-malware protections and analysis
  • Web filtering and security
  • Vulnerability scanning and management
  • Encryption technologies for data at rest and data in transit
  • Mobile device and removable media protection or management systems
  • Authentication including SSO and MFA
  • Cloud application security
  • SIEM systems
  • Interpreting CVE data
  • Device control
  • Data Loss Prevention (DLP)
  • Forensic analysis
• Familiarity with HR/HRIS or ERP-driven identity lifecycle processes and authoritative identity sources used for automated provisioning and deprovisioning.
• Working knowledge of regulatory security requirements, particularly Sarbanes-Oxley (SOX), HIPAA, and HITECH.
• Working knowledge of security frameworks such as HITRUST and NIST (or others).
• Ability to prioritize multiple tasks and be detail oriented.
• Excellent communication, interpersonal, and project management skills.
• Travel to field locations may be necessary to complete assigned projects.

Technologies

• Microsoft Active Directory
• Entra ID
• SSO
• MFA
• SIEM
• CVE
• PowerShell
• APIs
• Scripting
• Data Loss Prevention (DLP)
• Encryption technologies for data at rest and data in transit
• Anti-malware protections
• Web filtering and security
• Vulnerability scanning and management
• Mobile device and removable media protection or management systems
• Cloud application security
• Authentication
• Device control
• Forensic analysis
• HRIS
• ERP
• HITRUST
• NIST
• Sarbanes-Oxley (SOX)
• HIPAA
• HITECH

Benefits

• Challenging and rewarding work environment
• Growth and development opportunities within UHS and its subsidiaries
• Competitive Compensation
• Excellent Medical, Dental, Vision and Prescription Drug Plan
• 401k plan with company match
• Generous Paid Time Off

Preferred / Plus Qualifications

• Degree in Information Systems, Cybersecurity and Risk Management, Computer Science, or related field preferred.
• Experience with PowerShell, APIs, scripting, workflow automation, or identity system integrations is a plus.
• An information security certification is a plus.

Location: Tredyffrin, PA (onsite)

Recruitment Notice

• UHS is not accepting unsolicited assistance from search firms for this employment opportunity.
• Please, no phone calls or emails.
• All resumes submitted by search firms to any employee at UHS via-email, the Internet, or in any form and/or method without a valid written search agreement for this position will be deemed the sole property of UHS.
• No fee will be paid in the event the candidate is hired by UHS as a result of the referral or through other means.

EEO Statement

• UHS subsidiaries are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates.
• UHS subsidiaries are equal opportunity employers.

Avoid and Report Recruitment Scams

• Beware of anyone requesting financial or personal information.
• During the recruitment process, no recruiter or employee will request financial or personal information (e.g., Social Security Number, credit card or bank information) via email.
• Recruiters will not email from a public webmail client like Hotmail, Gmail, or Yahoo Mail.
• If you suspect a fraudulent job posting or job-related email mentioning UHS or its subsidiaries, report concerns to appropriate law enforcement.
• Verify job opportunities through legitimate UHS and UHS subsidiary career websites and avoid relying on unsolicited calls from recruiters.

UHS is a registered trademark of UHS of Delaware, Inc. (boilerplate legal/ownership statement).