<h1>Security Analyst/Technical Support Analyst 3</h1><p><strong>Location:</strong> Richmond, Virginia, United States</p><p><strong>Department:</strong> Information Technology</p><p><strong>Workplace:</strong> hybrid</p><p><strong>Employment Type:</strong> contract</p><h3>Description</h3><p><strong>Description:</strong></p><ul><li><strong>Job Title: VDH EHR Security Analyst/Technical Support Analyst 3</strong></li></ul><ul><li><strong>Work Type:</strong> Hybrid</li><li><strong>Location: </strong>Richmond, VA</li><li><strong>Salary:</strong> $18–$38 per hour</li><li><strong>Start Date:</strong> 10/05/2026</li><li><strong>End Date:</strong> 06/30/2027</li><li><strong>Industry Category:</strong> Information Technology / Healthcare IT / EHR Security</li><li><strong>Employment Type:</strong> 1099 Contract</li><li><strong>Requisition ID:</strong> 811322<br /></li></ul><p><strong>Overview:</strong></p><ul><li>The Virginia Department of Health (VDH) is seeking an <strong>EHR Security Analyst/Technical Support Analyst 3</strong> to support security, access, user provisioning, and Tier 1 technical support for the Electronic Health Record (EHR) environment.</li><li>The role provides technical and functional support for <strong>Cerner/OHPAC</strong> security configuration, user access, security roles, authentication, auditing, and access-related troubleshooting.</li><li>The analyst will collaborate with EHR application, IT, information security, privacy, compliance, clinical, and operational teams to maintain appropriate user access and security controls.</li><li>This position supports EHR security operations, audits, incident response, system maintenance, upgrades, and compliance activities.</li></ul><p></p><p><strong>Application:</strong></p><ul><li>Submit an updated resume highlighting:</li><ul><li>3+ years of healthcare IT experience.</li><li>3+ years of Millenium and OHPAC security position experience.</li><li>Cerner/OHPAC EHR security and access support.</li><li>HIPAA, HITECH, and healthcare security regulations.</li><li>Active Directory, SSO, MFA, and identity management.</li><li>Discern and CCL.</li><li>EHR security troubleshooting, auditing, and user provisioning.</li></ul><li>Include candidate email address and current city/state.</li><li>Candidate must physically reside within the United States for the duration of the assignment.<br /></li></ul><p><strong>Job Description:</strong></p><ul><li>Support EHR security configuration, access management, user provisioning, authentication, auditing, and access-related troubleshooting.</li><li>Maintain and map EHR position definitions, including Millenium Positions, Preferences, and OHPAC Security Groups, to VDH positions.</li><li>Review and process EHR access requests according to established policies, procedures, organizational standards, and role-based access requirements.</li><li>Create, modify, and terminate user access based on approved requests.</li><li>Monitor and enforce appropriate EHR access control positions and policies.</li><li>Help define and automate user provisioning and offboarding procedures.</li><li>Conduct internal EHR security audits to identify and mitigate risks and vulnerabilities.</li><li>Develop and maintain EHR security policies, procedures, guidelines, documentation, and downtime procedures.</li><li>Investigate and respond to EHR security incidents and support timely resolution and reporting.</li><li>Integrate security measures into new EHR features, updates, deployments, and third-party applications.</li><li>Monitor user behavior using tools such as P2Sentinel to identify trends and potential incidents.</li><li>Support internal and external audits.</li><li>Participate in Cerner/OHPAC upgrades, security patches, and system maintenance.</li><li>Support the Domain Strategy for the EHR application.</li><li>Stay current with security updates, emerging threats, industry best practices, and regulatory changes.</li><li>Recommend improvements and optimizations to the EHR security environment.</li><li>Provide Tier 1 technical and functional support to EHR end users in related security and access areas.</li></ul><p><strong>Responsibilities:</strong></p><ul><li>Manage EHR user access and role-based permissions.</li><li>Process and maintain user provisioning and offboarding activities.</li><li>Troubleshoot Cerner/OHPAC security and access issues.</li><li>Monitor access-related activities and perform security audits.</li><li>Support healthcare security and compliance requirements.</li><li>Maintain security policies, procedures, and technical documentation.</li><li>Investigate EHR security incidents and coordinate appropriate responses.</li><li>Collaborate with EHR, IT, information security, privacy, compliance, and application support teams.</li><li>Assist with upgrades, patches, maintenance, and security enhancements.</li><li>Support audit activities and security documentation.</li><li>Identify opportunities to improve EHR security, access management, and support processes.</li></ul><p><strong>Requirements</strong></p><h3>Minimum Qualifications:</h3><ul><li>3+ years of healthcare IT experience.</li><li>3+ years of experience with Millenium and OHPAC security positions.</li><li>3+ years of analytical, problem-solving, and troubleshooting experience related to Cerner/OHPAC security and access issues.</li><li>3+ years of communication and collaboration experience working with IT teams, compliance officers, and end users.</li><li>3+ years of knowledge of Discern and CCL.</li><li>Strong understanding of EHR systems.</li><li>Must be legally authorized to work in the United States without employer sponsorship, now or in the future.</li><li>Must physically reside within the United States for the duration of the assignment.<br /></li></ul><h3>Preferred Qualifications:</h3><ul><li>3+ years of general IT experience.</li><li>3+ years of experience with EHR systems, specifically Cerner/OHPAC.</li><li>Knowledge of HIPAA, HITECH, Meaningful Use, and other healthcare security regulations.</li><li>3+ years of experience with:</li><ul><li>Active Directory (AD).</li><li>Single Sign-On (SSO).</li><li>Multi-Factor Authentication (MFA).</li><li>Identity management solutions.</li></ul><li>3+ years of familiarity with healthcare IT infrastructure, including:</li><ul><li>Networking.</li><li>Firewalls.</li><li>Database security.</li></ul></ul><p><strong>Benefits</strong></p><p><strong>Compensation:</strong></p><ul><li><strong>Pay Rate:</strong> $18–$38 per hour.</li><li><strong>Benefits:</strong> None.</li><li><strong>Expenses:</strong> Not specified as reimbursed.<br /><br /><strong>Schedule:</strong></li><li>Full-time.<br /><br /><strong>Work Location:</strong></li><li>Richmond, VA.</li><li>Specific hybrid scheduling requirements will be determined by VDH based on business needs.</li></ul>