• This is a remote position. • You will be responsible for assisting the IT Security team with day-to-day IT security tasks and tool monitoring. • A part of your job role will be to ensure that the company's digital assets are protected from unauthorized access. • This includes securing both cloud and on-premises infrastructures, weeding through metrics and data to filter out suspicious activity, and finding and mitigating risks before breaches occur. • You will work with the infrastructure team to assist them with the security implementations in our IT infrastructure. • You will be responsible for assisting your team in setting security standards and maintaining computer networks while protecting the company from cyber-attacks. • You will be required to participate in security audits and help customers resolve their queries regarding the security landscape within the organization. • Other specific responsibilities include: Monitoring security access and various security tools to resolve the generated alerts. • Performing risk analysis and determining security gaps. • Assisting with cybersecurity compliance and governance. • Assist in maintaining security policies and documentation. • Analyzing security breaches to identify the root cause. • Verifying the security of third-party vendors and collaborating with them to meet security requirements.

• Investigate and respond to escalated security incidents across Microsoft cloud and on-premises environments • Perform advanced incident analysis using Microsoft Defender suite and Azure Sentinel • Conduct security assessment of Azure/Microsoft 365 configurations and implement hardening recommendations • Analyze and respond to advanced Active Directory attacks (Kerberoasting, Pass-the-Hash, Golden Ticket) • Monitor and investigate Exchange Server logs, email flow patterns, and phishing campaigns • Analyze federation security including ADFS token-based attacks and SAML token manipulation • Configure and tune WAF/firewall rule sets and investigate related security incidents • Develop network segmentation strategies and identify lateral movement attempts • Develop and maintain incident response playbooks for various attack scenarios • Coordinate incident response activities with cross-functional teams

• Provides leadership and guidance to the IAM Security team, organization and business partners on Sharp HealthCare's Identity and Access Management (IAM) and Epic Security strategy; ensuring policies and security standards are met • Responsible for the design, implementation, and maintenance of identity and access management systems, ensuring authorized individuals have appropriate access to systems and data • Efficiently and effectively, respond to IAM and Epic Security incidents, service requests, application access requests and audits • Provides leadership and support to peers as well as various other departments of the organization • Responsible for coordinating activities with multiple IT teams and Sharp departments to develop, maintain, support, and enhance Epic access and security

• Own and execute work in a high-volume ServiceNow queue, consistently handling hundreds of tickets per week for joiner/mover/leaver access changes, troubleshooting, and triage • Prioritize and route requests using impact, urgency, patient-care considerations, risk, and defined SLAs; escalate complex/high-risk issues appropriately • Troubleshoot access end-to-end (request intent, user attributes, role mapping, provisioning outcomes, in-application authorization) and document decisions/outcomes clearly for auditability • Serve as the senior escalation point for Epic access design/build and complex access issues; ensure access is scalable, supportable, and aligned to policy • Develop and maintain standardized access patterns Attribute Based Access Control (ABAC) /templates, privileged/elevated access controls) aligned to least privilege • Partner with Epic application teams and operational leaders to translate workflows into durable access models and reduce one-off exceptions • Maintain an Epic access catalog (roles/entitlements, risk tiers, prerequisites, approval paths) and keep it current as workflows evolve • Support access reviews/attestations for high-risk roles and privileged access; drive remediation of findings and control gaps • Support investigations related to inappropriate access/privacy concerns and contribute to corrective action plans • Partner with IAM/IGA stakeholders during SailPoint implementation to ensure Epic is “automation-ready” (clean entitlements, requestable roles, approvals, constraints, and edge-case handling) • Help align access with authoritative source systems (HR, operations, credentialing, etc.) by defining needed attributes and lifecycle scenarios (joiner/mover/leaver, LOA, contractors, students) • Support testing/UAT and rollout readiness by validating that automated provisioning yields correct in-application authorization and usable audit trails • Mentor and quality-review work performed by Level II analysts; establish standard work, runbooks, knowledge articles, and queue hygiene practices • Track and improve key operational metrics (turnaround time, rework/defect rate, exception volume, access quality) and drive measurable process improvement.