James Blanchard — Epic Analyst | Identity & Access

What I do daily

The access analyst's work, done at enterprise scale

Identity & Access

OneIdentity provisioningDeprovisioningAD group managementAccess requestsMFA troubleshootingSSO systemsAccess-control policy

Epic & EHR Support

Epic (multi-division)Epic printer mapping — inpatient & outpatientCernerMEDITECH ExpanseEscalation to Epic app/security teams

Service Desk Operations

ServiceCentral ITSMIncident & request lifecycleHigh-priority handlingSLA complianceKnowledge base authorship

Virtualization & Endpoints

Citrix DirectorVMware Horizon VDIBeyondTrust remote supportWindows endpointsBitLockerDNS / TCP-IP / VPN

Compliance & Care Context

HIPAA-compliant handlingOneSource (Experian)Midas+ITIL 4 Foundation (in progress)

Work history

Experience

Sep 2025 - Present
● Current

IT Client Support Analyst

HCA Healthcare · Parallon — Remote

Administer user identity and access through OneIdentity and Active Directory, covering provisioning, deprovisioning, group membership, access requests, and MFA issues under strict security and access-control policy. The same discipline as Epic user and security record management.
Support Epic daily across 180+ hospitals, resolving application, access, and connectivity issues for clinical and administrative end users in a 24/7 environment spanning Epic, Cerner, and MEDITECH Expanse.
Perform Epic printer mapping in inpatient and outpatient modules and in Active Directory; coordinate with Epic application teams on back-end and high-priority printing escalations.
Troubleshoot Citrix Virtual Apps sessions via Citrix Director and VMware Horizon VDI to restore Epic and clinical application access.
Manage the full incident lifecycle in ServiceCentral ITSM, handling high-priority and after-hours escalations with Tier II/III teams and driving clinical-impacting issues to resolution.
Author knowledge base documentation that improves first-call resolution and reduces repeat-incident volume; apply HIPAA-compliant handling in every interaction.

Jul 2020 - Apr 2024

Senior IT Representative

Superior Property Partners LLC — Jupiter, FL

Delivered high-volume phone-based technical support with consistent first-call resolution; documented incidents for audit readiness and escalated complex issues through established procedures.
Supported desktops, laptops, peripherals, and network-connected devices via remote diagnostics; partnered with internal teams on recurring-issue process improvements.

Jun 2015 - May 2017

Customer Experience Representative

Enterprise Holdings LLC — Orlando, FL

Handled inbound technical support in a high-volume call center; supported POS terminals and network-connected peripherals, managing cases end to end and escalating repeat-incident patterns for root-cause analysis.

Hands-on proof

Active Directory home lab

A fully functional AD domain (lab.tenvaro.io) built on Windows Server 2025, running in VirtualBox with a domain-joined Windows 10 workstation. The point of this lab is simple: the provisioning and identity workflows I run at HCA, rebuilt from scratch on my own hardware, so the skills are demonstrable outside of a production environment I can't screenshot. The three captures below walk the full lifecycle: provision the user, authenticate on a domain-joined workstation, and verify connectivity back to the DC.

Windows Server 2025 domain controller: Server Manager and Active Directory Users and Computers open on lab.tenvaro.io, showing user object Clark Gibson with properties including display name, description IT Client Analyst, department, and email — **1 · Provision**Windows Server 2025 DC on `lab.tenvaro.io`: ADUC open with a provisioned user object (Clark Gibson, IT Client Analyst) and full account properties: display name, description, office, and email.

Windows 10 workstation Start menu signed in as domain user Clark Gibson, confirming the provisioned account authenticates on a domain-joined machine — **2 · Authenticate**The same provisioned account signed in on a domain-joined Windows 10 workstation, confirming the identity works end to end from directory to desktop.

Command prompt on the workstation pinging DC-WIN10.lab.tenvaro.io with 4 of 4 replies and 0 percent packet loss — **3 · Connect**Workstation resolving and pinging `DC-WIN10.lab.tenvaro.io` with 0% packet loss, verifying DNS resolution and AD connectivity.

I work in Epic every day, across 180+ hospitals.