How to Hire a Prior Authorization Specialist: Credentials, Sourcing and Screening

Hiring this role starts with the queue it absorbs. In the AMA's 2025 prior authorization physician survey — 1,000 practicing physicians, 400 in primary care and 600 specialists — practices reported completing an average of 40 prior authorizations per physician per week. Physicians and their staff spent 13 hours a week on them, and 40% of physicians reported having staff who work exclusively on prior authorization.

Day one, your hire should be able to:

• Read one of your payers' coverage policies and turn it into a checklist for the service ordered.
• Push a complete request through the channel that payer actually uses. Phone was the most commonly used method for completing prior authorizations for medical services in the AMA's survey, and only 24% of physicians said their EHR offers electronic prior authorization for prescription drugs.
• Assemble the clinical documentation, and go back to your clinical team for more instead of submitting a thin request.
• Track every open request against the payer's turnaround and follow up without being asked.
• Record outcomes in your EHR or practice-management system so the next person picks up the thread.

O*NET's task list for the closest occupational group, insurance claims clerks, reads like a version of this job: reviewing insurance policies to determine coverage, and contacting involved persons for missing information. Build your expectations around that loop.

Ramp time is a payer-mix question more than a skills question. BLS puts the typical entry route for the financial-clerk group that covers this occupation at a high school diploma or equivalent, with duties learned through on-the-job training. Expect fluency in your top payers to take longer than general process competence.

Screen for denial awareness too. In the AMA survey, 32% of physicians said prior authorizations are often or always denied, and 21% said they always appeal an adverse decision. A hire who understands what a decline sets in motion protects your schedule, not just your inbox.

Want the work described from the worker's side first? The career guide to what a prior authorization specialist does covers the role, the provider and payer settings, and the career path.

The credentials in this space are voluntary certifications issued by professional bodies — credentials, not licenses. The closest BLS group to this role, insurance claims and policy processing clerks, is a weak proxy for the role, since most of those clerks work for insurers. BLS puts the typical entry route for financial clerks, the family that group sits in, at a high school diploma or equivalent with duties learned on the job. You set the bar for your practice. Four names come up repeatedly:

• AAPC's CPB — AAPC describes the Certified Professional Biller as validating expertise in the medical billing process: claim submission, payment posting, insurance guidelines and revenue cycle workflows.
• AAHAM's CRCS — AAHAM describes its certification family as a career ladder that begins with the Certified Revenue Cycle Specialist and culminates in the Certified Revenue Cycle Executive, with a professional-level exam for supervisors and managers.
• HFMA's CRCR — HFMA describes the Certified Revenue Cycle Representative as a national-level certification on the patient-centric revenue cycle.
• ACMA's PACS — the Prior Authorization Certified Specialist program is run by the Accreditation Council for Medical Affairs (ACMA), which says the program is accredited by IACET/ANSI and that ACMA is a member of the Institute for Credentialing Excellence.

Treat credentials as one signal. The question that says the most about day-one output is whether the candidate has worked payers like yours — the same service line, the same prior-auth channels — because the payer rules are the hard part of the job.

A clinical background is a different axis. It helps the hire chase documentation with your clinicians, and it matters structurally on the payer side of the transaction. Under 42 CFR 422.566(d), when a Medicare Advantage plan expects to issue a partially or fully adverse medical-necessity decision, the determination must be reviewed by a physician or other appropriate health care professional with relevant expertise. Non-clinical prior auth staff do not make those denials.

Credential names, coverage and requirements change. Confirm the current details with AAPC, AAHAM, HFMA or ACMA before you write a credential into a posting or a job offer.

Post where the audience already looks. Our prior authorization specialist jobs page sits next to the role's career guides, so candidates researching the job find your opening. Look inside your own walls as well: front-desk, registration and insurance-verification staff already speak payer, and an internal move keeps the institutional knowledge.

The external pool has a shape worth knowing. BLS's OEWS wage survey, which covers employees only, counted 214,260 insurance claims and policy processing clerk jobs nationally in May 2025 — the closest occupational group to this role, and a weak proxy, since those clerks work across industries and mostly for insurers. BLS's employment projections use a different base that includes the self-employed: 239,100 in 2025. On that base, 81.3% of the group's employment (194,400) was in finance and insurance, with 27,500 (11.5%) at direct health and medical insurance carriers and 12,800 (5.4%) in healthcare and social assistance. Experienced claims people sit disproportionately on the insurer side of the industry, so provider-side prior auth experience is the thinner slice of the pool — probe for it hard in interviews.

BLS projects the group roughly flat over the decade: employment of insurance claims and policy processing clerks, the same weak proxy group, is projected to move from that 239,100 in 2025 to 234,700 in 2035, down 1.9%, with 17,500 openings per year on average.

Search adjacent titles as well as this one. O*NET's sample titles for insurance claims clerks include Claims Processor, Claims Adjudicator, Claims Analyst and Claims Representative — résumés carrying those titles have done adjacent work. And when you want the hiring stack beyond this role, our guide to hiring billing and coding staff collects the posting, screening and compliance guides for every billing and coding role.

Test the work, not the vocabulary. Hand every finalist the same exercise: a mock service your practice actually schedules, a two-page excerpt of that payer's coverage policy, and a chart note with a documentation gap. Ask what the payer will want, what is missing, how they would frame the question to the ordering provider, and where they would log the outcome. That mirrors the tasks O*NET lists for insurance claims clerks — reviewing insurance policies to determine coverage, and contacting involved persons for missing information.

Test the channels too. Have the candidate draft a short portal message and role-play a follow-up call, because phone remained the most commonly used method for completing prior authorizations for medical services in the AMA's survey. A working phone manner with clinical staff is not a soft skill in this job; it is the job.

Run one denial scenario. Ask what they do when the request comes back declined, and listen for a candidate who separates a documentation gap from a coverage exclusion, knows when a peer-to-peer review or a formal appeal starts, and can say what they would document along the way. With 32% of physicians in the AMA survey reporting that prior authorizations are often or always denied, the decline path is part of the role, not an exception.

Close with systems and references. Name your EHR, practice-management system and payer portals in the posting, and ask which ones candidates have driven. Keep the exercise identical for every candidate and score it against a written rubric. Then check references for the two things a test cannot show: whether the person hit deadlines without supervision, and how they treated clinical staff under pressure.

OIG exclusion screening. OIG says entities should check the List of Excluded Individuals/Entities before employing or contracting with anyone and periodically afterward, and because OIG updates the LEIE monthly, screening each month best minimizes potential overpayment and civil monetary penalty liability. Anyone who hires an individual or entity on the LEIE may be subject to civil monetary penalties, and OIG says health care entities should routinely check the list for new hires and current employees. OIG's FAQ adds that the exclusion applies regardless of who submits the claims and covers all administrative and management services the excluded person furnishes. OIG's compliance guidance also lists monthly screening of State Medicaid exclusion lists alongside the LEIE as an example of routine monitoring.

The CMS prior authorization rule. CMS's Interoperability and Prior Authorization final rule (CMS-0057-F) requires impacted payers — Medicare Advantage organizations, state Medicaid and CHIP programs and their managed care plans — to send prior authorization decisions within 72 hours for expedited requests and seven calendar days for standard requests. Operational provisions generally start January 1, 2026, and API requirements generally January 1, 2027. The rule does not reach every payer or every request: employer and ERISA plans and Original Medicare sit outside it, the decision-deadline provision excludes QHP issuers on the federal exchanges, and the rule's prior authorization provisions do not apply to drugs. For you as an employer, the practical effect is workload design — the hire tracks payer-specific clocks, so build turnaround logging into the role and confirm each payer's own prior-auth requirements rather than assuming one rule covers them all.

HIPAA training. The hire handles protected health information from day one. The HIPAA Privacy Rule requires a covered entity to train all workforce members on its PHI policies and procedures as necessary and appropriate for their functions. New workforce members must be trained within a reasonable period after joining, and the covered entity must document that the training was provided. The regulation itself sets no fixed annual frequency for the training. If the role is remote, the Security Rule's workstation-use policies and physical safeguards reach home workstations that access electronic PHI.

Rules and dates move. Confirm current requirements with OIG, CMS or your MAC, with each payer, and with your health-care counsel before you finalize a hiring or outsourcing setup.

In-house puts the specialist next to your clinical team, which shortens the loop when a request comes back thin, and gives you direct control of training, coverage and quality. The tradeoff is that you carry recruitment, HIPAA management and the full employment cost.

Remote fits the work itself — phone, payer portals and document queues — and widens the pool beyond commuting distance. Prepare the groundwork before the first login: the Security Rule's workstation-use policies and physical safeguards apply to home workstations that access electronic PHI, so a remote setup needs defined equipment, access controls and a written policy before day one.

Outsourcing to a billing company or a prior-auth vendor moves the queue but not the oversight. HHS lists billing, claims processing and practice management among the activities that make a vendor a business associate when PHI is involved. A business associate agreement must contain the elements in 45 CFR 164.504(e): permitted uses and disclosures, safeguards, reporting of unauthorized uses and breaches, subcontractor flow-down, return or destruction of PHI at termination (if feasible), and authority to terminate for material breach. Subcontractors that handle PHI on a business associate's behalf are business associates too, and the business associate must have a BAA with them before disclosing PHI to them.

Whichever model you pick, compare full costs. BLS's Employer Costs for Employee Compensation data put private-industry benefits at 30.0% of compensation costs in June 2026 ($14.07 of $46.89 per hour worked), so a wage offer and a vendor invoice are not the same units. Get vendor pricing in writing against your actual volumes and payer mix before you decide.

Size the decision against your queue. The AMA's survey average of 40 prior authorizations per physician per week is a practice-level figure; your own volume by payer, specialty and service line tells you when one person stops being enough.

Structure onboarding the way OIG's guidance describes for billing staff. OIG's 2000 compliance guidance for physician practices recommends at least an annual coding and billing training program, and says new coding and billing staff should be trained as soon as possible and work under an experienced employee until training is complete. Pair your hire with your strongest front-end staffer, and write the payer-by-payer rules down as you go so the knowledge survives turnover.

Measure the work with your own numbers rather than a published target. HFMA's Patient Access MAP Keys include service authorization rates for inpatient/observation and outpatient work alongside pre-registration rate, insurance verification rate and point-of-service cash collections. HFMA defines the metrics; the target values are yours to set from your own baseline.

Watch the workload signals. In the AMA survey, 94% of physicians said prior authorization somewhat or significantly increases physician burnout, and the queue your specialist works is the same queue. Cross-training into insurance verification, AR follow-up or denials work builds your bench and gives the specialist a career path inside your organization.

The retention levers are the ones you control: covering a certification's cost once the hire has a runway, scheduling flexibility, and a real say in how the auth queue is organized. None of it replaces the basics — a realistic queue, working systems, and clinical teams that respond to documentation requests.

This page is employer information, not coding, billing-compliance, legal or tax advice. Confirm requirements with the agencies and bodies named — OIG, CMS, the credential issuers — and with your health-care counsel.