Identity Administrator

About the role

As a global marketing experience company, Quad’s goal is to help our clients win every day. We use our data-driven integrated marketing and manufacturing platform to streamline solutions for our clients, reduce friction and enhance their marketing spend effectiveness. We’ve built a rich legacy by believing in our people, allowing them to act like owners and to take charge of their own success. Whether an operator, sales rep, a graphic artist or a clinician, we’re all driven to perform at our best— for ourselves and our clients. At our core, we’re a company that believes we can always create a better way.

We are seeking an IT Identity Administrator to join our Global Infrastructure Services team. This role administers and supports Quad’s identity and access management services and the infrastructure behind them. Responsibilities include SailPoint IdentityIQ, Active Directory and Entra ID, privileged access, certificate and PKI services, external domains, DNS, and identity-related server environments.

Responsibilities

• Support IAM operations using SailPoint IdentityIQ.
• Administer identity lifecycle processes, access modeling, infrastructure role design, access requests and provisioning, certifications, application integrations.
• Administer users and groups across multiple domains.
• Support enterprise applications, Conditional Access, MFA, account and access troubleshooting, and related directory services.
• Maintain identity-related servers and domain controller infrastructure to support reliability, performance, and security.
• Complete assigned maintenance and changes in accordance with team procedures.
• Administer internal and external DNS, domain registrations, and proof of ownership.
• Manage DNS records, and investigate name-resolution issues.
• Read and troubleshoot existing scripts, including those written in unfamiliar languages; develop and maintain scripts, primarily in PowerShell, to automate administrative tasks and information retrieval; and support identity-related automation and changes through Azure Pipelines.
• Administer internal and external SSL/TLS certificate automation, issuance, renewal, implementation, and issues.
• Work incidents and requests in the shared support queue, investigate access and identity issues, document resolutions and escalate issues as needed.
• Participate in a periodic on-call rotation.
• Maintain clear procedures and technical documentation.
• Communicate effectively with global teams, application owners, internal partners, and customers.

Qualifications

• Education & Experience: Associate or bachelor’s degree in Information Technology or a related field, or equivalent work experience.
• Identity and Access Management: Basic understanding of IAM concepts, including user authentication, authorization, and secure access control principles.
• AD / Entra ID: Basic understanding of users, groups, and navigation in ADUC. Familiarity with troubleshooting account lockouts and permissions is helpful.
• Scripting: Able to read and understand scripts, including scripts written in unfamiliar languages. Ability to create new scripts is helpful.
• Communication & Teamwork: Clear communication, careful documentation, reliability, and willingness to learn and ask for help when needed.

Skills

• Experience or exposure in any of the following is helpful, but is not required: SailPoint IdentityIQ or another identity governance platform.
• Experience or exposure in any of the following is helpful, but is not required: PowerShell, Java, or other scripting/development languages.
• Experience or exposure in any of the following is helpful, but is not required: Active Directory, Entra ID, Windows Server, or domain controller administration.
• Experience or exposure in any of the following is helpful, but is not required: SSL/TLS certificates, PKI, external domain management, or DNS administration.
• Experience or exposure in any of the following is helpful, but is not required: PAM, RBAC, ABAC, access reviews, or infrastructure role design.
• Experience or exposure in any of the following is helpful, but is not required: Azure Pipelines or other CI/CD tools.
• Experience or exposure in any of the following is helpful, but is not required: Application integrations using API's or DataBase connections.
• Experience or exposure in any of the following is helpful, but is not required: Network fundamentals such as TCP/IP, HTTP/S.
• Experience or exposure in any of the following is helpful, but is not required: Agile or similar team practices.
• Driven and Enthusiastic: Interested in learning identity technologies and taking