Senior Business Analyst - Cybersecurity

Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance. We also have comprehensive leadership and technical development academies to help build your skills and capabilities.

 

Summary

As a Senior Business Analyst - Cybersecurity at Gainwell, you can contribute your skills as we harness the power of technology to help our clients improve the health and well-being of the members they serve — a community’s most vulnerable. Connect your passion with purpose, teaming with people who thrive on finding innovative solutions to some of healthcare’s biggest challenges.

The Business Analyst will work closely with security architects, identity management engineers, project managers, and business stakeholders to gather, analyze, and document requirements for authentication and Identity Access Management (IAM) projects. This role will focus on initiatives such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and integration with enterprise identity platforms like Ping Identity. The BA will ensure solutions meet business needs, comply with security standards, and are successfully implemented.

Here are the details on this position.

Your role in our mission

Requirements Gathering & Analysis

• Collaborate with business and technical stakeholders to define requirements for authentication workflows, access policies, and integration points.
• Document functional and non-functional security requirements, including performance, scalability, compliance, and auditability.
• Analyze current authentication processes and identify gaps or vulnerabilities.
• Translate security policies and architectural guidelines into actionable system requirements.

Documentation & Communication

• Create and maintain Business Requirements Documents (BRDs), Process Flows, Data Mapping, and Integration Specifications for IAM projects.
• Document SSO flows, MFA triggers, broker configurations, and application onboarding requirements.
• Maintain a repository of authentication and authorization requirements for future reuse.

 

.... your role continued

Collaboration & Support

• Work with identity platform engineers to integrate applications with Ping Identity or other IAM systems.
• Support configuration and testing of SSO and MFA solutions.
• Assist with troubleshooting authentication issues during testing and go-live.
• Coordinate with security teams to ensure requirements meet compliance (e.g., NIST, HIPAA, CMS guidelines).

Testing & Validation

• Develop test cases for authentication scenarios, role-based access control (RBAC), and failover authentication flows.
• Participate in User Acceptance Testing (UAT) and validate that implemented solutions meet documented requirements.
• Ensure error messages and logs provide meaningful information for users and administrators.

Process Improvement

• Recommend best practices for IAM processes and security onboarding.
• Contribute to playbooks and runbooks for authentication-related support.

What we're looking for

• Bachelor’s degree in Information Systems, Cybersecurity, or related field (or equivalent experience).

• 5+ years as a Business Analyst in security, IAM, or authentication projects.

• Experience with Ping Identity, SSO protocols (SAML, OIDC, OAuth), and MFA solutions.

• Familiarity with Identity Brokers, directory services (LDAP, AD), and API-based authentication.

• Understanding of security compliance framewor