Hey guys, I've got 10 years MRI clinical experience with no professional IT experience. I have plenty of personal hobby IT experience, though. Been working clinically with EPIC for 8 years. I'd like to start working remotely and have been looking at EPIC Ambulatory Analyst jobs.

I'm in a MCOL area in the Gulf South. What is a reasonable starting salary for someone like me? I know I will be taking a pay cut, but I just want to have some idea what I should be aiming for when applying or interviewing for positions. And how quickly do you like i could get my pay rate up again? Thanks for any help you could offer!

Looking for advice from people working in Epic Security / IAM
Hey everyone! I’m looking to connect with people who currently work in Epic Security, Epic IAM, or related healthcare identity/access roles.
A little about my background:
• I have ~1 year of healthcare IT Help Desk experience supporting BJC, where I worked with things like Active Directory, password resets, account unlocks, ServiceNow, and general healthcare IT support.
• I transitioned into Healthcare IAM / Identity Services and will have about 1 year of healthcare IAM experience by December.
• I’m currently working toward my Epic Security Coordinator certification and expect to have that completed in December.
• In January, I’ll be moving into a dedicated Epic IAM role, where I’ll be getting hands-on experience with Epic security and identity/access workflows.
My long-term goal is to become really strong in Epic Security/IAM and eventually grow into an Epic Security Coordinator-type role.
I’m not really looking for job leads right now — I’m more interested in learning from people already doing the work.
For those of you working in Epic Security/IAM:
What skills made the biggest difference when you were starting out?
What do you wish you had learned earlier?
What separates someone who is “good” at Epic Security from someone who is really excellent?
Are there specific Epic workflows, security concepts, or healthcare IAM topics I should prioritize?
What advice would you give someone entering an Epic IAM role with a year of healthcare IAM experience?
I’d also love to connect with anyone who has taken a similar path from Help Desk → IAM → Epic Security.
Thanks in advance! I’m really just trying to learn from people who have already been down this road.

Seems like a recurring theme here: people struggling with the Sphinx Test. I took it for the second time and failed again. This time, it cost me an internal job I was a top candidate for.

I feel like an idiot, and I’m tired of it. I’m not even sure what I’m looking for? Sympathy? Reassurance? A reason to stop giving this test so much power over how I see myself. But that’s the real issue: I’ve been measuring my worth against this one thing, and I need to stop.

Anyone else felt this way? How do I actually move past this? Thanks yall.

I am broke! I am trying to find a workaround to pay for paubox. I’d rather not pay anything extra at all. I heard from someone that Google came out with new features that mimic paubox security. Does anyone have any insight into this. Am I stuck with paying extra forever?

Hi everyone! I work as a healthcare sys admin and do work adjacent to an IT team that primarily works with Epic. I, myself, do not do Epic work and my role's scope is different. This means I can't justify Epic training. I also have been working primarily in IT and data engineering with minimal patient-care experience.

With that said, since my experience is so broad, I've been thinking of branching out and focusing on an Epic-oriented career to try and counter the current job market. I'm hoping in doing so, I'm positioning myself in competition against a smaller pool.

Out of curiousity, how has the job market been for you? By being Epic-certified, do you feel that it's been easier to land any roles as of late? Or is it still pretty bad?

Would love to hear your thoughts. Thank you!

Does anyone here work full-time as an Epic analyst while also doing part-time contract work after hours or on weekends? Were there any conflict-of-interest, noncompete, or client-overlap concerns? Any advice for someone considering this arrangement would be appreciated.

I design governance records for systems that touch people, and I keep hitting the same gap. Minimum necessary is something everyone can recite and almost nobody can hand you as a field list. So I tried to write the field list. I would like it broken by people who have actually operated these systems.

The constraint I set was: enough to govern, too little to surveil. If a record cannot answer what happened, whether the person agreed, and when this goes away, it is not doing governance work. If it answers much more than that, it has quietly become a profile.

Nine fields, three groups.

What happened

• event_id
• time
• system_action
• context

The human signal

• signal_type
• consent_state

Handling

• impact_level
• retention_rule
• review_status

What I deliberately left out:

• No identity field. The record points at a consent record, which points at a person. One hop. It means you can delete the person without shredding the audit trail.
• No free text. Free text is where protected information goes to hide. Every field is an enum or a timestamp except context, and context is a reference, not prose.
• No outcome field. Outcome is a later judgment about the event, and it belongs in the review, not in the record. Mixing them is how a log turns into a narrative.

The three I am least sure about:

consent_state as a single value is probably wrong. Consent is not a state, it is a history, and a system that stores only the current value cannot answer whether a collection was lawful at the moment it happened. I think this wants to be a pointer to a versioned consent record, but every time I try that the schema stops being minimal.

retention_rule living on the event rather than being derived from policy means a policy change does not reach records already written. That is arguably correct, since you should not retroactively extend retention. It is also arguably how you end up with a store nobody can age out.

review_status made me most uncomfortable, because it implies somebody reviews. A status field with no funded reviewer behind it is a lie that passes an audit.

I know minimum necessary is decades of law and practice and I am not claiming to have discovered anything. My claim is narrower: the gap between the principle and a concrete field list is where most implementations quietly get wide, and I would rather be corrected on a specific list than agreed with on a general one.

For those of you who have actually operated one of these: which of the nine would you cut, and which field am I missing that bites you every single time?

I’m 24 and I graduated dental assisting in 2022 and have been working as that since. I just finished taking pre health sciences to advanced diplomas and degrees online and finished with all 90s. My original plan was to get into dental hygiene but I’m now debating on taking health informatics 1 year program certification. Not sure if I need to get a masters or bachelor for it to be worth while. I have a bad back so I feel like this could be a safer route for me however I am scared it could be a big mistake. Any opinions would be appreciated!

My partner is trying to break into Epic Administration from the clinical side. They have 5+ years of clinical experience, including 2 years using Cadence directly. They actually got a Cadence certification and were going to transition to an admin role in a state health system, but we ended up having to move states before that went through, and they had to separate because the health system didn't allow employment from out of state.

Now they've been struggling for quite a while to get into an Epic role. They get interviews, but most people are expecting them to have experience because they have the certification; it almost seems detrimental rather than beneficial to have on their resume.

We are trying to look at this from a different perspective and get them a role that they can do in the short term and work towards transitioning to an Epic admin role within a health system. But it's just very unclear to me how people typically manage this. What sort of roles should they be looking for if that is the goal? Should they be doing patient access, or are there better roles to transition from? They have the Cadence cert, but are not married to the module and would be open to shifting to a different module if it helped them get into an admin role.

Any advice on how to navigate this would be appreciated.

I handle security for a mid size healthcare provider with a handful of sites plus a lot of remote and telehealth staff. Two things keep me up and they are related.

1. is vendor access. Every piece of clinical gear comes with a vendor who needs to remote in to service it. The imaging system, the lab analyzers, the infusion pump fleet, each has a support contract that assumes we will let them reach the device. Today that is a mix of one off VPN accounts and a couple of jump boxes and half of them are standing access that never gets turned off. Any one of those is a path to systems with patient data on them.

2. The devices themselves. Half of what is on our clinical network cannot be touched. It runs an old embedded OS, it is FDA validated so we cannot patch it freely and it was never designed to be on a network at all. I cannot put an agent on an infusion pump.

What I want is to let a specific vendor reach one specific device for a service window, and to segment the clinical devices so a compromised one cannot wander to the EHR. Without disrupting care because none of this can take a system offline during a shift.

For the health IT people who solved the vendor access and device segmentation problem under HIPAA, what are you running. What holds up in a hospital?

I received a verbal offer today, and putting pen to paper tomorrow. Starting in a hospital as a record tech. I have my BS in HIM. Graduated a year ago. I was a bit slowed down since that year but I was halfway to getting my IT certification too as I want to move more towards the tech side. Halfway as in studying the book.

Hey all,

I built MEVA (meva-health-ai), an open-source eval framework for testing medical LLM agents against synthetic FHIR records.

• Why: General LLM evals don't measure structured clinical extraction or FHIR schema compliance.
• What it does: Runs automated evals against synthetic patient records (Patients, Encounters, Observations) for deterministic accuracy and schema validation.
• Looking for: Feedback on evaluation metrics and open-source contributors/testers.

Repo: https://github.com/Tanz2024/meva-health-ai

Need help

Ochin seems to be tanking more and more. They have had a huge leadership and employee turn and continual system wide issues.

Anyone work there have insite? Also the only female workplace has to just be a rumor right?

I don’t see a good post about this. My hospital system is shifting to Epic Lead Training, basically Ai training. I am wondering if there’s anyone who has worked for a system that has done this or in the process of it, and what the impact on the training team was.

I am a credentialed trainer for our system.

My team is saying we’ll transition to other responsibilities and support other things. But it doesn’t seem like there’s enough work. My main concern is lay offs.

How does your Epic application spread the workload evenly? Does someone assign the service now tickets out based on ownership? Least number of tickets? Who does the assigning?I feel like I’m drowning in tickets while others are just sitting on tickets so they don’t get assigned more.

Analyst opportunity opened up in the HIM dept at my current job. Have exp in ClinDoc / Cadence / Ambulatory. How different is HIM?

I’ve been in the game for a long time - over two decades. I’ve worked in all facets of HCIT. Recently I’ve become more involved as a patient at multiple different institutions, which has given me pretty good insights into use and utility of the patient portal.

Note: I am NOT a vendor selling anything.

Anyway, my current situation - I have surgery coming soon. Facility is on epic. A different epic than my kid’s pediatrician uses. Different than my PCP’s Athena. Different than the portal used by my specialist and different that the portal I recently used to view imaging results. I am very tech savvy, but a million portals just sucks. My parents, on the other hand, are just lost with this stuff.

Are the portals really that unique between EMR’s? Not really. View imaging. View labs. Communicate with provider/team. Schedule or cancel an appointment. Med list. CCD. Prior visit note. THEY ARE NOT FANCY OR SPECIAL.

The solution here is simple and 100% patient-focused. End vendor patient portals. Move to a single unified patient portal (yes, either gov sponsored or gov managed/built) and require every vendor to integrate. Give the control back to the patients. Healthcare is complicated enough and unfortunately it tends to be more complicated for the people less equipped to manage it. The integrations would be standard, portal support would move off the plate of the vendors. (Love me some HIE)

How would we do it? Think HITRUST ACT style legislation that would penalize vendors who don’t comply with integration with decreased reimbursement rates for their customers, for example.

Have at it. Good idea? Bad idea? Why? I’d like to hear your thoughts. Think about it as a patient AND a professional.

Is anyone familiar with Amtelco software and know of ways to search for Amtelco Programming positions in call centers/healthcare? It’s a really niche position and I’m grasping at straws at this point

Hi guys, I recently was reached out to by a recruiter from Medix to possibly become an Epic Analyst for a hospital a few hours from my house. Requires no experience and they'd pay for training by sending me to Epic in Wisconsin for a few weeks.

For anyone who has gone through this with Medix: when you interviewed, what did they ask? How did you prepare? What does an Epic Analyst specifically do day to day?

I've got no idea how to prepare, this was sudden and I wasn't really looking for this specific job, but I have been attempting to finish my degree in data science so it's a great path for me.

Thanks for any thoughts in advance :)

Well we’re fucked lol