Identity Management Application Analyst – Community Connect Iowa

Position Summary:

This position is responsible for analyzing, developing, implementing, supporting, and maintaining Identity and Access Management (IAM) solutions that support enterprise applications and identity lifecycle processes across UI Health Care. The role contributes to the development and maintenance of application code, scripts, system configurations, integrations, automated workflows, and provisioning logic used to create, modify, secure, and deprovision user accounts and access. 

The position analyzes business and technical requirements, evaluates operational processes and data, troubleshoots application and automation issues, and develops or implements solutions that improve the accuracy, reliability, security, and efficiency of IAM processes. The position works collaboratively with IAM operational staff, application developers, system administrators, application teams, and other technical and functional stakeholders. 

As a member of the IAM team, this position also actively participates in operational identity and access management activities, including ticket processing, account provisioning and deprovisioning, access changes, troubleshooting, and rotating on-call support. Direct participation in IAM operations is an integral responsibility of the position and provides operational context for identifying recurring issues, improving processes, and developing automation and technical solutions. 

This position is eligible for remote work within Iowa and will require a work arrangement form to be completed upon the start of your employment. Per policy, work arrangements will be reviewed annually, and must comply with the remote work program and related policies and employee travel policy when working at a remote location. 

Position Responsibilities:

Analysis & Design 

• Analyze business and technical requirements related to Identity and Access Management and translate them into application enhancements, scripts, system configurations, integrations, automated workflows, and provisioning logic. 

• Analyze large and complex datasets to identify access issues, provisioning trends, automation opportunities, data quality concerns, and opportunities to improve IAM processes. 

• Investigate existing application behavior, code, scripts, workflows, and system integrations to understand current functionality and determine appropriate technical solutions. 

• Collaborate with IAM staff, application teams, system administrators, and other stakeholders to evaluate workflows and develop solutions that align with operational needs, enterprise architecture, and security requirements. 

• Participate in technical design discussions and contribute to the design of provisioning logic, role-based access models, system integrations, and automated IAM processes. 

• Develop and maintain technical documentation for application components, scripts, configurations, integrations, workflows, and system behavior. 

Development, Implementation, & Configuration 

• Develop, maintain, test, and enhance application code, scripts, system configurations, reports, and automated workflows supporting identity and access management processes. 

• Implement application features and enhancements within defined scope using approved programming languages, scripting technologies, frameworks, development tools, and organizational standards. 

• Develop and maintain automation supporting account provisioning, deprovisioning, access changes, account maintenance, and other identity lifecycle processes. 

• Maintain and enhance existing IAM codebases and scripts, including troubleshooting defects, implementing corrections, refactoring existing logic, and improving reliability and maintainability. 

• Develop and maintain integrations between IAM tools and enterprise systems, including directory services, databases, APIs, file-based interfaces, and other system integration methods as appropriate. 

• Participate in application and system testing, including functional testing, validation of provisioning logic, troubleshooting, and regression testing. 

• Follow established source control, change management, testing, documentation, and deployment practices. 

Support, Maintenance, & Operational IAM 

• Participate directly in IAM operational processes, including ticket processing, account provisioning and deprovisioning, access changes, account maintenance, and resolution of access-related issues. 

• Investigate, troubleshoot, and resolve application defects, script failures, automation errors, provisioning failures, data issues, and access-related problems. 

• Monitor automated IAM processes and workflows to ensure accuracy, reliability, timeliness, and compliance with security and operational requirements. 

• Analyze recurring operational issues and manual processes to identify opportunities for automation, application enhancements, and process improvements. 

• Collaborate with functional and technical teams to prioritize and resolve support tickets, application issues, and enhancement requests. 

• Maintain operational and technical documentation, including support procedures, troubleshooting guidance, system configurations, and technical processes. 

• Participate in the rotating IAM on-call support schedule, including occasional nights and weekends as scheduled. 

• Follow organizational change management, information security, confidentiality, and IT operational policies and procedures. 

Collaboration & Communication 

• Work collaboratively with IAM operational staff, application developers, system administrators, application teams, and other technical and functional stakeholders to design, implement, support, and improve IAM solutions. 

• Communicate technical concepts, system behavior, problems, risks, and proposed solutions effectively to technical and non-technical stakeholders. 

• Participate in technical reviews and incorporate feedback to improve solution quality, maintainability, security, and performance. 

• Provide technical guidance, documentation, training, and knowledge transfer to IAM team members and other stakeholders as appropriate. 

• Contribute technical ideas and recommendations that improve IAM automation, development practices, operational efficiency, and system quality. 

Pay Grade:  https://hr.uiowa.edu/pay/pay-plans/professional-and-scientific-pay-structure

Salary: $58,876 to commensurate – Paygrade 4B

The University of Iowa offers a generous benefits package, including 24 days paid vacation per year to start and paid sick leave. Complete information regarding the full benefits package may be viewed at https://hr.uiowa.edu/benefits

Percent of Time:  100%

Staff Type: Professional & Scientific

Type of Position: Regular

Education Requirements:

Bachelor’s degree in MIS, Computer Science, or related field; or an equivalent combination of education and experience in a related field 

Required Qualifications:

• Experience developing, modifying, or maintaining application code or scripts using one or more programming or scripting languages. 

• Experience troubleshooting application, scripting, automation, integration, or data-related issues. 

• Experience analyzing business or technical requirements and translating them into application logic, scripts, system configurations, automated workflows, or other technical solutions. 

• Experience working with relational data and writing or modifying database queries. 

• Experience working with complex, integrated IT systems and applications. 

• Demonstrated ability to analyze technical problems, investigate root causes, and implement or recommend appropriate solutions. 

• Ability to communicate effectively, both verbally and in writing, with technical and non-technical stakeholders. 

• Demonstrated ability to manage multiple priorities and work effectively in a collaborative team environment. 

• Ability to obtain and maintain role-relevant technical certifications as required. (e.g., Epic Security/Core Analyst or equivalent identity and access management certifications) 

Desired Qualifications:

• Experience with PowerShell, C#, .NET, MVC or similar web application frameworks, SQL, JavaScript, or other technologies used to develop and support enterprise applications and automation. 

• Experience with identity and access management concepts and processes, including account lifecycle management, provisioning and deprovisioning, role-based access control, authentication, and authorization. 

• Experience with Microsoft Active Directory, Microsoft Entra ID, or similar directory and identity platforms. 

• Experience developing or supporting system integrations using APIs, databases, file-based interfaces, scheduled automation, or event-driven processes. 

• Experience maintaining or enhancing an existing application codebase or automation environment. 

• Experience with source control and structured application change, testing, and deployment practices. 

• Experience working in healthcare or another regulated environment. 

• Familiarity with HIPAA, FERPA, and related confidentiality and information security requirements. 

• Experience with Epic security or other enterprise healthcare application security and provisioning processes. 

To be considered, applicants must upload a resume (under submission relevant materials) that clearly addresses how they meet the listed required and desired qualifications of this position. A cover letter is desired as part of the application process. Job openings are posted for a minimum of 7 calendar days. This job may be removed from posting and filled any time after the minimum posting period has ended.

Successful candidates will be required to self-disclose any conviction history and will be subject to a criminal background check and credential/education verification.

This position is not eligible for University sponsorship for employment authorization.

For additional questions contact Ann Lampe at Ann-Lampe@uiowa.edu.