IDENTITY AND ACCESS MANAGEMENT MANAGER   ABOUT YOU: Join our team as a Technical Manager, Identity and Access Management (IAM) and take charge of leading cutting-edge IAM solutions that safeguard our organization's most critical assets. In this hands-on leadership role, you'll design, implement, and manage advanced IAM systems across Access Management, Identity Governance & Administration (IGA), Privileged Access Management (PAM), and Active Directory. You'll actively engage in configuring solutions, integrating systems, and troubleshooting complex issues while ensuring security and scalability across both on-premise and cloud environments.   As the driving force behind IAM operations, you'll collaborate with cross-functional teams to build secure, compliant IAM services that empower our business. We're seeking a leader with deep technical expertise who can guide a team of engineers and analysts, tackle technical challenges head-on, and deliver seamless, secure identity management solutions. If you're ready to make an impact and thrive in a dynamic, innovative environment, this is the role for you!   YOU HAVE: Passion. Ability to influence and collaborate effectively with cross-functional teams, including IT, Security, and Compliance. Technical skills.  Proficiency in scripting and automation (e.g., PowerShell, Python) for managing IAM workflows and system integrations. Expertise in deploying and managing SSO, MFA, and directory synchronization services. Experience. At least 7 years of hands-on IAM roles, with a focus on solution design, configuration, and troubleshooting. Extensive hands-on experience configuring IAM tools such as Active Directory, Entra ID, Okta, SailPoint, AWS IAM, and Delinea PAM. Education. Bachelor's degree in Computer Science, Information Security, or a related field. Strong understanding. In-depth knowledge of authentication protocols (SAML, OAuth, Kerberos, OpenID Connect) and API integration using SCIM and RESTful APIs. Strong understanding of cloud identity management, including configuration of IAM roles, policies, and permissions in AWS and Azure environments.  Great communication skills. Excellent communication skills for translating complex technical concepts to non-technical stakeholders. Strong problem solving skills.  Ability to conduct root cause analysis and remediation of complex IAM issues. Leadership skills. Proven ability to guide, mentor, and develop a cybersecurity team while leading IAM technical projects, including planning, execution, and delivery. Preferred. Experience with CISSP, CIAM, CAP, or equivalent. YOU WILL: IAM STRATEGY AND PROCESS Design, configure, and deploy IAM solutions, including Active Directory (AD), Entra ID, AWS IAM, Okta MFA, and Delinea PAM. Manage and configure IAM tools for user provisioning, deprovisioning, access reviews, and entitlement management. Implement and manage Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federated identity services. Develop custom connectors, workflows, and scripts (e.g., PowerShell, Python) to automate IAM processes and integrate IAM systems with applications and directories. Configure role-based access controls (RBAC), attribute-based access controls (ABAC), and privilege management in both on-premise and cloud environments. Troubleshoot complex IAM issues, including SSO, MFA integration, directory synchronization, and policy configurations.
  IAM TECHNOLOGY AND PROJECT EXECUTION Lead technical integrations of IAM systems with internal and external applications (e.g., HR systems, cloud platforms, business applications). Oversee migration projects, including hybrid identity management and cloud IAM integrations with platforms such as AWS and Azure.  Configure identity lifecycle management solutions (e.g., SailPoint) and develop automated processes for access certification, attestation, and role mining. Evaluate and implement new IAM technologies and methodologies to enhance security and streamline identity processes. Provide hands-on support during the installation, configuration, and upgrade of IAM products, ensuring optimal performance and security alignment.
OPERATIONAL MANAGEMENT AND COMPLIANCE Administer and maintain IAM infrastructure components, including Active Directory, Azure AD, Okta, and Privileged Access Management (PAM) solutions. Monitor IAM systems, audit logs, and user activity for potential security incidents or violations of IAM policies. Act as the primary escalation point for complex technical issues and incidents related to identity and access management. Ensure IAM processes align with security policies and regulatory standards, conducting periodic access reviews and remediation. Maintain technical documentation, including configurations, deployment guides, and operational procedures.   IAM LEADERSHIP AND COLLABORATION Administer and maintain IAM infrastructure components, including Active Directory, Azure AD, Okta, and Privileged Access Management (PAM) solutions. Monitor IAM systems, audit logs, and user activity for potential security incidents or violations of IAM policies. Act as the primary escalation point for complex technical issues and incidents related to identity and access management. Ensure IAM processes align with security policies and regulatory standards, conducting periodic access reviews and remediation. Maintain technical documentation, including configurations, deployment guides, and operational procedures.     MANAGE TEAM Coach, mentor, and provide leadership to two - four direct reports. Lead all aspects of personnel management, including hiring, promotions, performance reviews, and disciplinary actions. Support the development of your team’s skills, address performance gaps, and ensure fair application of company policies in collaboration with HR.   Typical/expected % of overnight travel:    < 5% (less than 3 weeks/year)   LOVE WHERE YOU WORK: We care about your health. We offer competitive healthcare (health, dental, vision, coverage) in addition to voluntary benefits including home and car insurance, pet insurance, flexible spending account, amongst many more. We invest in your future. Our 401K plan has immediate vesting, so you can start saving for retirement right away. We believe in flexibility. We provide hybrid work options. We want you to unplug when needed. We believe in taking your time off without guilt and offer accrued paid time off and company paid holidays. *For Washington residents, you will receive 13 vacation days, 8 paid sick leave, 8 company paid holidays, and family paid leave.  We care about your development. We support tuition reimbursement after 6 months of service.   APPLICATION DEADLINE: December 30, 2024   ABOUT US: Jostens leads the student commemoration market and has been serving local communities for over 125 years. We work with thousands of K-12 schools, colleges and universities each year, and have the honor of partnering with beloved sports teams and esteemed organizations across the country. Our iconic products — like yearbooks, letter jackets, class jewelry and championship rings — keep meaningful traditions alive and inspire millions of people to celebrate their unique stories, milestone moments and biggest accomplishments every year. We have 13 first-class facilities across the globe, from North America to the Caribbean. Watch a short video about us here.   ALL ABOUT TECHNOLOGY: Our Technology organization combines planning, analysis, and development in combination with both enterprise retail and manufacturing platforms as well as custom development using primarily Java, web services, and web application frameworks like ReactJS/NodeJS. The Technology organization manages priorities through a centralized quarterly planning in close collaborative with business decision-making and strategy, directly supporting leadership in Marketing, Sales, Digital & Operations. Delivery is managed through typically an agile, two-week scrum or Kanban methodology leveraging a suite of Atlassian products. The Technology teams are structured organizationally to focus on key platforms and the business units that they. Though the utilization of best-in-class technical software, such as AWS, Tableau, SAP BPC, Oracle EBS, Salesforce, & Microsoft 360, you will get to play a critical role in determining technology solutions that steer our business. Jostens allows for a hybrid work setting that focuses on creating professional and personal development. We can’t wait to show you what our Technology Team has to offer at Jostens!   AMERICANS WITH DISABILITIES ACT (ADA): Jostens is committed to the full inclusion of all qualified individuals. If reasonable accommodation is required to fully participate in the job application or interview process, or to perform the essential functions of the position, please reach out to our HR team at recruiter@jostens.com or (952) 830-3399.   Jostens is an Equal Opportunity Employer and complies with applicable employment laws. EOE/M/F/Vet/Disabled are encouraged to apply.  California Privacy Policy: https://www.jostens.com/about/california-employee-privacy-policy