Remote Epic Security Analyst Jobs (NOW HIRING)

Xtensys is a rapidly growing managed service provider delivering innovative technology solutions to health systems, beginning in New York and expanding nationwide. Owned by two industry leaders with a strong focus on advancing rural and community healthcare, Xtensys is executing several major initiatives and scaling quickly. With a team of more than 500 professionals, we are building a people-centered culture rooted in collaboration, innovation, and strategic thinking.

We are looking for an experienced Epic Security User and Provisioning Manager, to lead our team into its next chapter of excellence.

In this role, you will assist with the development of departmental policies and procedures and is responsible for promoting an environment of compliance and operational efficiency. The Epic Security User and Provisioning Manager plans for new systems, upgrades, and applications using broad guidelines and requiring a high degree of independence, decision making, and coordination.

You will function as an expert resource in advanced systems analysis and design for business partners, staff, and users to assist in complex problem troubleshooting and resolution. The manager leads and coordinates both security and research and cross functional projects.

• East Coast Alignment: Our core operational and collaboration hours follow the Eastern Time Zone (ET), keeping our workflows synchronized with our primary clients and systems.
• Shared Support: Because healthcare never sleeps, we participate in a collaborative afterhours oncall rotation. We plan and schedule intentionally so that coverage is predictable, balanced, and deeply supported by the entire team.
Why Join Us?
• MissionDriven Work: You are the "bridge" ensuring technology serves health systems and their patients when they need it most.
• Autonomy & Ownership: We trust you. You’ll lead projects, define success, and manage complexities with total support.
• A Culture of Innovation: Have a fresh perspective? We want it. We encourage risktaking and continuous improvement.
• Continuous Growth: We fuel your "restless curiosity" with opportunities to expand your skillset and mentor others.
The Role:

Work Arrangement: This role requires the manager to provide hands-on, active physical leadership and management at client locations during critical lifecycle events. Operational duties include traveling to client locations to provide mandatory on-site support during upgrades, go-lives, and post-live visits. Specifically, the manager is expected to be physically embedded within the client command center for a baseline duration of two weeks during go-lives, unless the client specifies a longer period. Following the initial rollout, the manager executes standard three-day on-site post-live visits to stabilize access workflows, manage issues, and finalize deployment sign-off.

Your Mission:

In this role, you won’t just manage workflows —you will champion a culture. You’ll drive our operation to be a highly collaborative, customer-focused, and service-oriented team that delivers top-tier support across Xtensys.

• Steer the Ship: Plan, organize, schedule, and optimize daily workflows to keep the team operating at peak efficiency.
• Own the Outcomes: Take full ownership of the team's project pipeline, ensuring every task and major milestone is crossed successfully and on time.
• Empower the Team: Lead and mentor a dedicated group of professionals, aligning their strengths with complex security and provisioning projects.

What You’ll Do Day-to-Day: Key Responsibilities

Team Leadership & Talent Development

• Lead & Mentor: Manage daily operations, performance reviews, and oncall scheduling for a team of specialized analysts.
• Cultivate Growth: Build tailored professional development plans to close skills gaps and align team strengths with Xtensys goals.

Identity Governance & Access Management

• Own Provisioning Operations: Oversee the daytoday operations of the Provider (SER) and User Provisioning (U&P) teams to ensure clinicians receive exact, rolebased access without delay.
• System Integrity: Validate Service Area, Provider, and Resource profiles to keep clinical billing and scheduling seamless and errorfree.

Security Strategy, Compliance & Auditing

• Audit & Remediate: Collaborate with Information Security Leadership to run routine internal audits, maintain uptodate SOPs, and swiftly resolve outstanding audit findings.
• Risk Management: Develop updated security policies, proposals, and risk assessments aligned with broader business requirements.
Cross-Functional Project Management
• Day1 Readiness: Partner closely with HR, IT, and Operational leaders to sync provisioning workflows with onboarding, offboarding, and system installs.
• Drive Initiatives: Actively lead integrated security workgroups, build project charters, and resolve complex crosssystem issues.
Financial & Operational Optimization
• DataDriven Management: Track operational metrics, deliver performance dashboards to leadership, and assist the Director with annual budget and strategic resource planning.
• Continuous Improvement: Identify bottlenecks to reduce manual provisioning steps and optimize overall workflows.

What Success Looks Like (Key Performance Metrics)

• Onboarding Excellence: Ensure 100% of new hires have correct system access on Day 1 of employment.
• Critical Speed: Process urgent offboarding/termination requests within 2 hours of notification.
• Operational Accuracy: Maintain highly accurate SER records to eliminate billing drops and satisfy target provisioning SLAs.
• Team Stability: Drive annual team competency growth and maintain zero gaps in monthly oncall coverage.
• Audit Compliance: Meet all target remediation timelines and update security application SOPs annually.
• Fiscal Efficiency: Keep operational spending within the allocated department budget.

Who You Are & What You’ll Bring

Leadership & Talent Management
• People First: Proven experience across the full talent cycle—including recruitment, mentoring, performance management, and driving team retention/engagement.
• Strategic Leadership: A highintegrity leader with strong business and financial acumen, a passion for innovation, and the ability to lead selfdirected, crossfunctional teams.
• Influence: Exceptional communication skills with a proven track record of leading without direct authority and collaborating across diverse, multidisciplinary teams.
• Under Pressure: Highly organized with a meticulous attention to detail and the ability to solve complex problems under tight deadlines.
Epic & Technical Expertise
• Minimum 4 years of Epic experience, with at least 2 years focused on SER build and provider master file configuration.
• Epic SER Leadership: Deep experience managing Epic SER teams for a multientity health system or Community Connect environment.
• Implementation Experience: Proven track record of implementing Epic in new hospitals or ambulatory practices, with strong knowledge of downstream modules (Cadence, Ambulatory, PB, and HB).
• Governance & Security: Prior experience partnering with data governance committees or Epic councils, alongside the ability to mentor staff on technical security concepts.
• Compliance & Trust: Sharp focus on regulatory standards (including HIPAA) and an absolute commitment to maintaining confidentiality when handling sensitive data and PHI.
Education/Certifications:
• Bachelor’s degree in Healthcare Administration, Information Systems, Business, or a related field (or equivalent experience).
• Epic SER Certification
Travel Requirements:
• This role requires annual travel of up to 25%, which includes mandatory onsite deployment to the client's command center for two weeks during system golives unless the client specifies otherwise. Additionally, you will travel to the client site for three days during postlive followup visits.
Physical Readiness:
• The physical requirements for this remote position consist primarily of sedentary work, which involves sitting for extended periods while executing tasks on a computer.
• Daily operations require fine motor skills for prolonged keyboard and mouse use, along with the visual acuity necessary to review digital records and participate in frequent video conferences.
• The employee must also be able to occasionally stand, walk, and flex or reach as needed throughout the workday and may require the physical capability to occasionally lift, move, or manipulate office equipment and files weighing up to 25 pounds.

#LI-Remote