How to Hire a Credentialing Specialist: Credentials, Sourcing and Screening

A credentialing specialist keeps your providers enrollable — and enrollable is what makes them billable. When an enrollment is not in place, the visits behind it may not be billable to that payer, which is why this seat sits upstream of everything your billers do.

The worker's side of the role — what a credentialing specialist does across practices, hospitals and vendors — is the career guide's subject. This page stays on the employer's question: what the seat must be able to do before you let it near your payer relationships.

On day one, test candidates against four capabilities:

• Running an enrollment application end to end — collecting the provider's license and practice details, completing each payer's forms accurately, submitting, and following up until the payer responds.
• Verifying credentials against primary sources — confirming licenses, training and work history with the issuing bodies rather than from copies in a file. That verification practice is what NCQA assesses when it reviews organizations that verify practitioner credentials.
• Managing recurring cycles, not one-time projects — Medicare enrollment is the clearest example: to maintain billing privileges, providers and suppliers other than DMEPOS suppliers must resubmit and recertify their enrollment information every 5 years (42 CFR 424.515).
• Keeping the provider file current — license expirations, reappointments and demographic changes tracked before they lapse, not discovered after a claim problem.

Under those capabilities sits one habit the whole seat turns on: accurate data entry, deadline tracking and the persistence to chase a stalled application. A work sample surfaces that habit faster than an interview answer does.

The credentials attached to this seat come from NAMSS. NAMSS offers the CPCS and CPMSM certification programs, and both are accredited by the National Commission for Certifying Agencies (NCCA). NAMSS also reports that over 2,500 organizations employ NAMSS-credentialed professionals.

Whether to require the CPCS is your call as the employer. A requirement narrows the candidate pool; a preference keeps it wide while still naming the standard you want. Either way, write the line plainly — "CPCS preferred" or "CPCS or equivalent payer-enrollment experience" — and post only what you will actually screen for.

One scope note before you write the requirement. NAMSS says the CPCS exam covers credentialing, privileging and primary source verification but not provider enrollment — so if the seat you are filling is enrollment-heavy, weigh what the exam measures against the work you need done. For provider enrollment specifically, NAMSS launched the first exam for its Certified Provider Enrollment Specialist (CPES) credential in fall 2025, which NAMSS describes as the first provider enrollment certification on the market.

Two distinctions keep the requirement honest. First, a certification is a credential from the body that issues it, not a license — treat it as one signal next to references and a work sample, never as proof of competence on its own. Second, don't confuse the individual credential with organizational accreditation: NCQA offers Credentialing Accreditation for full-scope credentialing including committee review, and a Credentialing Certification for organizations that verify practitioner credentials. Those attach to an organization's program, not to the person you hire.

Verify what a candidate claims, too. Our research found no public lookup we can cite for checking a CPCS credential — ask NAMSS how to confirm a credential is current before you weigh one on a résumé.

Before you post: exam and eligibility rules change. Confirm current CPCS requirements with NAMSS, which owns the credential.

Start inside. If someone on your staff already spends their day on work that runs next to this seat — eligibility questions, payer-portal accounts, practitioner records — an internal move buys you someone who knows your providers. You still train the payer-enrollment craft.

Outside, the search rides the same channels as hiring billing and coding staff generally, with one twist: title variants. Search candidates and postings for the function, not one title — try variants like provider enrollment, medical staff services and provider data management. And because the day-to-day is documents, portals and deadlines, remote candidates belong in the pool alongside local ones; say in the posting which you will consider.

No federal benchmark exists for sizing the pool: BLS has no separate occupation for credentialing specialists, so it publishes no employment or wage series for the role by name. The nearest group it reports — Information and Record Clerks, All Other (SOC 43-4199) — is a loose stand-in spanning many clerk occupations. In the BLS OEWS employer survey (May 2025, all industries), that group counted 134,920 jobs. In BLS's separate Employment Projections program, which counts the self-employed as well, the same group is projected to move from 143,100 in 2025 to 144,300 in 2035 (0.8%), with about 15,000 openings a year on average. Read those as general clerical labor-market context, not a credentialing headcount.

When you are ready to post, scan the live credentialing specialist jobs first — it shows how candidates see the role described and where your opening will sit.

Test the work, not the interview polish. A screening loop with four parts keeps the decision evidence-based:

• Résumé signals. Payers worked with (Medicare, Medicaid, commercial), whether the candidate ran initial enrollments or recredentialing, and exposure to revalidation cycles. Titles vary in this niche, so read for the function.
• Scenario questions. Ask the candidate to walk through a revalidation from first notice to approval, a provider joining the group mid-year, and an expired document discovered late. Listen for sequencing, verification habits, and who they contact when a payer stalls.
• A work sample. Build a mock enrollment checklist or document-chase exercise from your own payer mix and hand the same one to every finalist. Score it the same way each time.
• References and background. If you run a billing company, OIG's 1998 compliance guidance for billing companies recommends a reasonable and prudent background investigation — including a reference check and disclosure of criminal convictions or exclusion actions — for new employees with discretionary authority over compliance-related decisions.

Calibrate the scenario answers against the cycles the seat manages: revalidation windows, license expirations, recredentialing timelines, and the payer follow-up loop between submission and approval. A candidate who volunteers the follow-up discipline — and asks you which payers and provider types you run — is describing the job back to you.

Keep every question about the work itself, and run your final question list past counsel or your HR advisor before the first interview.

Four rule sets touch this hire, and none is exotic.

OIG exclusion screening. OIG says entities should check the List of Excluded Individuals/Entities (LEIE) before employing or contracting with anyone and periodically afterward — and because OIG updates the LEIE monthly, screening each month best minimizes potential overpayment and civil monetary penalty liability. The stakes are direct: OIG says anyone who hires an individual or entity on the LEIE may be subject to civil monetary penalties, and health care entities should routinely check the list for new hires and current employees.

The General Compliance Program Guidance lists monthly screening of the LEIE and state Medicaid exclusion lists among its examples of routine compliance monitoring — alongside regular screening of state licensure and certification databases and an annual review of policies and procedures. OIG notes that many state Medicaid programs keep their own exclusion lists, which is why both lists get named. And the ban reaches administrative work: OIG's FAQ says the exclusion applies regardless of who submits the claims and covers all administrative and management services the excluded person furnishes — language that puts an administrative seat like this one inside the screening habit.

HIPAA training. The Privacy Rule (45 CFR 164.530(b)(1)) requires a covered entity to train all members of its workforce on its PHI policies and procedures as necessary and appropriate for their functions. Each new workforce member must be trained within a reasonable period after joining (45 CFR 164.530(b)(2)); the rule sets no fixed annual frequency, and the covered entity must document that the training happened (45 CFR 164.530(b)(2)(ii)). Fold a new credentialing hire into that training on arrival like any other workforce member.

Medicare enrollment upkeep. The recurring deadline is structural: the 5-year resubmission and recertification under 42 CFR 424.515 — required of providers and suppliers other than DMEPOS suppliers — is what maintains Medicare billing privileges, so it is the cycle your hire exists to never miss.

Job-posting law. The EEOC says it is illegal to publish a job advertisement that shows a preference for, or discourages applicants because of, race, color, religion, sex (including pregnancy, sexual orientation and transgender status), national origin, age 40 or older, disability or genetic information.

Some states also put pay in the posting itself. California Labor Code 432.3(c)(3) requires employers with 15 or more employees to include the pay scale in any job posting, and a third party posting the job for them must include it too. New York Labor Law 194-b requires businesses with four or more employees to list a compensation range and job description for advertised jobs, and to state if a position is commission-based.

Washington's Equal Pay and Opportunities Act requires employers with 15 or more employees to include a wage scale or salary range, a general description of all benefits and a general description of other compensation in job postings. Colorado's Equal Pay for Equal Work Act requires employers to disclose compensation, benefits information and how and when to apply in all internal and public job postings. Pay-transparency rules differ by state and some cities, and our research verified only the states named here — check the rules wherever you hire.

Name the rule-makers when you brief the seat: OIG publishes the LEIE and the compliance guidance; CMS sets the enrollment recertification rule; HHS OCR administers the HIPAA rules; the EEOC and the state labor agencies publish the posting rules. Confirm how each applies to your organization with your compliance advisor or health-care counsel.

All three models work; they fail in different ways.

In-house puts the enrollment trail next to the people who depend on it — your front desk, your billers, your providers — and keeps practitioner files under your own supervision. It earns its keep once enrollment and recredentialing volume justifies a dedicated seat.

Remote widens the pool for document-and-portal work. The safeguards travel with the work: HIPAA's workstation-use and physical-safeguard policies cover every workstation that accesses ePHI, home workstations included (45 CFR 164.310(b)-(c)). Settle equipment, workspace and access rules before the start date, and put them in your remote-work policy rather than in an offer-letter aside.

Outsourced trades the seat for a vendor relationship that still needs your oversight. Ask any credentialing vendor how it verifies credentials — primary sources versus copies — how it tracks revalidations, and what reporting you receive and when. NCQA's programs give you concrete questions to ask about: the body offers Credentialing Accreditation for full-scope credentialing including committee review, and a Credentialing Certification for organizations that verify practitioner credentials. Any such designation attaches to the vendor's program, not to your obligations, so weigh it as evidence rather than a substitute for oversight.

The HIPAA question underneath is fact-specific. HHS lists billing, claims processing and practice management among the activities that make a vendor a business associate when PHI is involved; credentialing arrangements are not on that example list. Have counsel look at your specific arrangement before any information moves.

Start the retention work in week one. OIG's 2000 physician-practice guidance sketches the ramp for new coding and billing staff — train them as soon as possible and have them work under an experienced employee until training is complete. The same pairing discipline fits a credentialing hire: shadow the enrollment trail before owning it, and put the training plan in writing so the standard survives turnover.

Then give the seat a ladder. Cross-training is the obvious rung — the enrollment trail connects to insurance verification, prior authorization and billing, and a specialist who understands what an enrollment gap does to downstream claims gets more valuable on both sides of that line. If certification support is part of your plan, NAMSS maintains the CPCS and CPMSM programs; confirm current requirements and renewal details with NAMSS rather than from a posting.

Pay is part of the math, and it is yours to research: our research found no BLS wage series for credentialing specialists by name and no published industry benchmark we can cite for this seat. Benchmark from your own market, your internal pay bands and local postings — whatever you adopt becomes your own policy.

Finally, hand the seat a rhythm to own. The compliance guidance's monitoring examples — monthly exclusion-list screening, regular licensure-database checks, an annual review of your policies and procedures — are a standing cadence a good credentialing specialist can run and report on. A hire who runs that cadence reliably is showing you exactly the work you are keeping them for.

Employer information, not coding, billing-compliance, legal or tax advice. The rules named here belong to their agencies — OIG, CMS, HHS OCR, the EEOC and the state labor agencies — and they change. Confirm screening, training, enrollment, posting and contracting decisions with the agency or payer named, and with health-care counsel where contracts are involved.