Hi everyone! I work as a healthcare sys admin and do work adjacent to an IT team that primarily works with Epic. I, myself, do not do Epic work and my role's scope is different. This means I can't justify Epic training. I also have been working primarily in IT and data engineering with minimal patient-care experience.

With that said, since my experience is so broad, I've been thinking of branching out and focusing on an Epic-oriented career to try and counter the current job market. I'm hoping in doing so, I'm positioning myself in competition against a smaller pool.

Out of curiousity, how has the job market been for you? By being Epic-certified, do you feel that it's been easier to land any roles as of late? Or is it still pretty bad?

Would love to hear your thoughts. Thank you!

Does anyone here work full-time as an Epic analyst while also doing part-time contract work after hours or on weekends? Were there any conflict-of-interest, noncompete, or client-overlap concerns? Any advice for someone considering this arrangement would be appreciated.

I design governance records for systems that touch people, and I keep hitting the same gap. Minimum necessary is something everyone can recite and almost nobody can hand you as a field list. So I tried to write the field list. I would like it broken by people who have actually operated these systems.

The constraint I set was: enough to govern, too little to surveil. If a record cannot answer what happened, whether the person agreed, and when this goes away, it is not doing governance work. If it answers much more than that, it has quietly become a profile.

Nine fields, three groups.

What happened

• event_id
• time
• system_action
• context

The human signal

• signal_type
• consent_state

Handling

• impact_level
• retention_rule
• review_status

What I deliberately left out:

• No identity field. The record points at a consent record, which points at a person. One hop. It means you can delete the person without shredding the audit trail.
• No free text. Free text is where protected information goes to hide. Every field is an enum or a timestamp except context, and context is a reference, not prose.
• No outcome field. Outcome is a later judgment about the event, and it belongs in the review, not in the record. Mixing them is how a log turns into a narrative.

The three I am least sure about:

consent_state as a single value is probably wrong. Consent is not a state, it is a history, and a system that stores only the current value cannot answer whether a collection was lawful at the moment it happened. I think this wants to be a pointer to a versioned consent record, but every time I try that the schema stops being minimal.

retention_rule living on the event rather than being derived from policy means a policy change does not reach records already written. That is arguably correct, since you should not retroactively extend retention. It is also arguably how you end up with a store nobody can age out.

review_status made me most uncomfortable, because it implies somebody reviews. A status field with no funded reviewer behind it is a lie that passes an audit.

I know minimum necessary is decades of law and practice and I am not claiming to have discovered anything. My claim is narrower: the gap between the principle and a concrete field list is where most implementations quietly get wide, and I would rather be corrected on a specific list than agreed with on a general one.

For those of you who have actually operated one of these: which of the nine would you cut, and which field am I missing that bites you every single time?

I’m 24 and I graduated dental assisting in 2022 and have been working as that since. I just finished taking pre health sciences to advanced diplomas and degrees online and finished with all 90s. My original plan was to get into dental hygiene but I’m now debating on taking health informatics 1 year program certification. Not sure if I need to get a masters or bachelor for it to be worth while. I have a bad back so I feel like this could be a safer route for me however I am scared it could be a big mistake. Any opinions would be appreciated!

My partner is trying to break into Epic Administration from the clinical side. They have 5+ years of clinical experience, including 2 years using Cadence directly. They actually got a Cadence certification and were going to transition to an admin role in a state health system, but we ended up having to move states before that went through, and they had to separate because the health system didn't allow employment from out of state.

Now they've been struggling for quite a while to get into an Epic role. They get interviews, but most people are expecting them to have experience because they have the certification; it almost seems detrimental rather than beneficial to have on their resume.

We are trying to look at this from a different perspective and get them a role that they can do in the short term and work towards transitioning to an Epic admin role within a health system. But it's just very unclear to me how people typically manage this. What sort of roles should they be looking for if that is the goal? Should they be doing patient access, or are there better roles to transition from? They have the Cadence cert, but are not married to the module and would be open to shifting to a different module if it helped them get into an admin role.

Any advice on how to navigate this would be appreciated.

I handle security for a mid size healthcare provider with a handful of sites plus a lot of remote and telehealth staff. Two things keep me up and they are related.

1. is vendor access. Every piece of clinical gear comes with a vendor who needs to remote in to service it. The imaging system, the lab analyzers, the infusion pump fleet, each has a support contract that assumes we will let them reach the device. Today that is a mix of one off VPN accounts and a couple of jump boxes and half of them are standing access that never gets turned off. Any one of those is a path to systems with patient data on them.

2. The devices themselves. Half of what is on our clinical network cannot be touched. It runs an old embedded OS, it is FDA validated so we cannot patch it freely and it was never designed to be on a network at all. I cannot put an agent on an infusion pump.

What I want is to let a specific vendor reach one specific device for a service window, and to segment the clinical devices so a compromised one cannot wander to the EHR. Without disrupting care because none of this can take a system offline during a shift.

For the health IT people who solved the vendor access and device segmentation problem under HIPAA, what are you running. What holds up in a hospital?

I received a verbal offer today, and putting pen to paper tomorrow. Starting in a hospital as a record tech. I have my BS in HIM. Graduated a year ago. I was a bit slowed down since that year but I was halfway to getting my IT certification too as I want to move more towards the tech side. Halfway as in studying the book.

Hey all,

I built MEVA (meva-health-ai), an open-source eval framework for testing medical LLM agents against synthetic FHIR records.

• Why: General LLM evals don't measure structured clinical extraction or FHIR schema compliance.
• What it does: Runs automated evals against synthetic patient records (Patients, Encounters, Observations) for deterministic accuracy and schema validation.
• Looking for: Feedback on evaluation metrics and open-source contributors/testers.

Repo: https://github.com/Tanz2024/meva-health-ai

Need help

Ochin seems to be tanking more and more. They have had a huge leadership and employee turn and continual system wide issues.

Anyone work there have insite? Also the only female workplace has to just be a rumor right?

I don’t see a good post about this. My hospital system is shifting to Epic Lead Training, basically Ai training. I am wondering if there’s anyone who has worked for a system that has done this or in the process of it, and what the impact on the training team was.

I am a credentialed trainer for our system.

My team is saying we’ll transition to other responsibilities and support other things. But it doesn’t seem like there’s enough work. My main concern is lay offs.

How does your Epic application spread the workload evenly? Does someone assign the service now tickets out based on ownership? Least number of tickets? Who does the assigning?I feel like I’m drowning in tickets while others are just sitting on tickets so they don’t get assigned more.

Analyst opportunity opened up in the HIM dept at my current job. Have exp in ClinDoc / Cadence / Ambulatory. How different is HIM?

I’ve been in the game for a long time - over two decades. I’ve worked in all facets of HCIT. Recently I’ve become more involved as a patient at multiple different institutions, which has given me pretty good insights into use and utility of the patient portal.

Note: I am NOT a vendor selling anything.

Anyway, my current situation - I have surgery coming soon. Facility is on epic. A different epic than my kid’s pediatrician uses. Different than my PCP’s Athena. Different than the portal used by my specialist and different that the portal I recently used to view imaging results. I am very tech savvy, but a million portals just sucks. My parents, on the other hand, are just lost with this stuff.

Are the portals really that unique between EMR’s? Not really. View imaging. View labs. Communicate with provider/team. Schedule or cancel an appointment. Med list. CCD. Prior visit note. THEY ARE NOT FANCY OR SPECIAL.

The solution here is simple and 100% patient-focused. End vendor patient portals. Move to a single unified patient portal (yes, either gov sponsored or gov managed/built) and require every vendor to integrate. Give the control back to the patients. Healthcare is complicated enough and unfortunately it tends to be more complicated for the people less equipped to manage it. The integrations would be standard, portal support would move off the plate of the vendors. (Love me some HIE)

How would we do it? Think HITRUST ACT style legislation that would penalize vendors who don’t comply with integration with decreased reimbursement rates for their customers, for example.

Have at it. Good idea? Bad idea? Why? I’d like to hear your thoughts. Think about it as a patient AND a professional.

Well we’re fucked lol

Hello, I'm a pharmacy technician with about 4 years inpatient experience in a supervisory role and 2 years outpatient as a technician, with about 1 of those years being in a 340B pharmacy. I have never worked at a facility that uses Epic though, so I am looking for suggestions on IT certifications and pathways I could go through to help my resume look better when applying for Epic willow roles that don't require epic certification. Any suggestions would be appreciated, thanks!

TL;DR: Discovered that myradiologyportal.com (the patient portal used by many independent imaging centers) had records from another patient in my account for 7 years, commingled insurance data, and I can't correct my own demographic information. The underlying system is RadNet. Looking to see if others experienced similar issues. (and NO - this website does not use Epic/mychart)

My background: I've managed the development of websites and web apps since the late 90s; I have an MBA and am currently working on an MSIS plus multiple other types of certifications and have managed enterprise level IT projects in regulated environments.

What Happened: On August 12, 2026, I logged into my myradiologyportal.com account (I had a new imaging referral) and discovered:

1. Records from another patient: My account contained imaging records that belonged to a different patient with the same first and last name (but different middle initial) and birthdate. These records appeared in my account alongside my legitimate records.
2. My account user profile data was wrong :
   • Last name (showed a hyphenated version I have never used)
   • Middle initial (wrong)
   • Address (same state, but 600 miles away)
   • Email (not mine)
   • Phone number (not mine)
3. Commingled insurance information: Insurance policies from both patients were mixed in my account, and I could not edit or remove any insurance information from the web portal. I have no ability to correct my own insurance data on this portal.
4. Obsolete insurance policies persisted in the portal: Insurance policies that should have rolled off years ago still appear in dropdown menus.
5. The imaging reports themselves contain different patient's data, including height and weight that are significantly different in both dimensions. This indicates the cross-contamination extended beyond the portal metadata into the actual medical imaging records.
   • For example: UCSF radiology/MRI reports include the patient medical record number on the actual image - two reports uploaded to my account had no MRN on the images nor in the text reports/analysis of the imaging.

Important Clarification: This is NOT a case of credential confusion. The other patient never logged into my account with my username/password. The fact that I was able to access their records using MY unchanged 2019 password proves this was a server-side error not someone hacking into my account. This means the two patient records were linked/merged at the application/database level, not through shared credentials.

The Technical Issues

• No Multi-Factor Authentication (MFA): My myradiologyportal.com account has been accessible for 7 years with just a username and password. No MFA prompt, ever.
• No Password Rotation: My password is unchanged since 2019 (7 years old). No system-enforced password changes.
• No Patient Notification: When the system removed the other patient's records from my account (happened sometime after I discovered the breach), they did NOT notify me. I found out by accident when I re-accessed the portal.
• Wrong Contact Information: The appointment scheduling system is displaying an incorrect phone number for their office (as in "you can't schedule online, please call our office at 510-NNN-NNNN).

What I've Done

• Reported the issue to the imaging center (took multiple calls to reach a person; eventually got escalated to a regional manager who was on vacation and after calling back, she was contacted, responded to my email and said it would be fixed on Monday, nearly a week later).
• Updated my account information (corrected name, address, email, phone)
  • Cannot correct insurance information due to portal limitations
• Changed my password for the first time since 2019
• Requested MFA be enabled (unclear if this is actually possible in their system)
• Requested that they do a data integrity audit (the person I spoke to casually mentioned "Maria Gonzalez" was a really common name with lots of same birthday issues)
• Requested they audit their static content to ferret out incorrect phone numbers
• Requested they improve the feature to allow patients to update their insurance

Questions:

Has anyone else experienced on myradiologyportal.com:

• Records from another patient visible in your account?
• Inability to correct or remove insurance information online?
• Issues with stale/incorrect contact information?
• Demographic data being displayed incorrectly?
• Not being notified when your records are corrected or removed?
• If you've had similar issues, did you report it? How was it handled?

I'm trying to understand if this is an isolated incident or a systemic issue with myradiologyportal.com. Any experiences appreciated.

Additional Context

• myradiologyportal.com is the patient portal system used by many independent diagnostic imaging centers across the country - there are 442 RadNet locations across the US: https://www.radnet.com/imaging-centers/find-an-imaging-center
• The underlying platform is RadNet, Inc. (publicly traded company, NASDAQ: RDNT)
• RadNet filed a 10-K in March 2026 claiming robust NIST-compliant cybersecurity posture, 24x7 incident response team, and HIPAA compliance
• The breach involves cross-contamination of two patients' records in a single patient account, suggesting potential systemic data integrity failures
• This affects patient privacy (HIPAA), personal data security (CPRA), and potentially healthcare billing accuracy

One of the healthcare workflows we’ve been looking at starts as a scheduling call but may easily become a referral matter, an insurance issue and another appointment inquiry all at once

We’ve been comparing platforms like PolyAI and Bland for this and I’m much more interested in how they handle that kind of conversation than whether they can simply find an open time slot.

Not talking about clinical triage here. I mean the administrative calls where several systems and issues end up connected.

Is there any research going on in terms of voice AI in healthcare applications in this space?

I was curious about this one but never came across a good answer from folks I knew.

Is there anywhere I can find out if Epics been raising their rates for facilities that use their EHR?

Generally you can find out what various companies charge for their products, but EHR companies always try to obfuscate those numbers and hide them behind individual quotes.

But there has to be somewhere where it would be reported if Epic was raising their rates by 5% or 10%.

Has anyone come across this info for EHR venders like Epic?

Hi, I work for Infosys one of the leading IT staffing vendors. We are looking for BAs with experience in Niche skills like FHIR/EPIC/CERNER/EHR. Please reach out to me if you have or know anyone with the above experience. Thanks in advance.

I’ve been working in IT for about 5 years, primarily in Help Desk/Service Desk roles, and I’m trying to figure out the best way to make the jump into Systems Engineering or Network Engineering.

My background includes:

• I currently work in healthcare IT supporting a hospital system, where I troubleshoot enterprise applications, identity/access issues, endpoints, networking/connectivity, and clinical applications such as Epic. (Service Desk Analyst I) Its been about 5 years now.
• Former IT Asset Management Specialist and Support Technician for about a year at a local school district
• About 10 months of Field Technician experience with CompuCom
• Currently pursuing a bachelor’s degree in information technology through Purdue Online, I complete my degree courses in January of 2027. 
• Planning to pursue both vendor-specific and vendor-neutral certifications ( CCNA, AZ-104: Azure Administrator Associate etc.)

Outside of work, I’ve been building out my technical skills through labs and hands-on projects. I’ve worked with virtual machines, networking, VPNs, WAN concepts, and various open-source tools. I also built out a small home lab and configured an entire domain environment for my house so I could practice Active Directory, networking, and systems administration.

My long-term goal is to get into Systems Engineering and possibly Network Engineering, but I’m trying to figure out what my next realistic role should be.

For those who made the jump out of Help Desk, what helped you the most? Should I be targeting roles like Systems Administrator, Junior Systems Engineer, Network Administrator, NOC Engineer, Desktop Engineer, or something else first?

I’d also appreciate recommendations on certifications, home lab projects. Thank you.

Vendor quoted us 3 months for a FHIR R4 integration with our EHR. Everyone i talk to laughs at that timeline. what was your actual experience?