Identity Access Management (IAM) Platform Lead

Administration & Operations; Fairfax, Virginia (VA, MN); On-site; USD 140,000 - 190,000; Full time

Job summary

George Mason University seeks an IAM Platform Lead to serve as the design authority for enterprise identity and access management. You will define architecture, standards, and lifecycle models across Microsoft Entra ID, Active Directory, Shibboleth, and related services, while stewarding legacy systems through a multi-year modernization.

You will collaborate across cybersecurity, infrastructure, applications, HR and other departments to establish reusable standards and resolve complex identity

Qualifications

• Bachelor's degree or equivalent combination of education and experience.
• Significant experience designing, implementing, or governing enterprise IAM including Microsoft Entra ID, Active Directory, hybrid identity, federation, SSO, and identity governance.
• Knowledge of Microsoft Entra ID, Active Directory, SAML, OAuth, OpenID Connect, LDAP, and Zero Trust identity control patterns.
• Ability to develop enterprise architecture, standards, roadmaps, and reusable application onboarding patterns.
• Ability to provide technical leadership for legacy Linux-hosted IAM services within a modernization program.
• Must be U.S. citizen, lawful permanent resident, or protected individual; eligible to work in secure computing environments (ITAR/CUI)

Responsibilities

• Define architecture, standards, and lifecycle models for IAM across Entra ID, AD, Shibboleth, and related services.
• Collaborate with cybersecurity, infrastructure, applications, HR, and other departments to establish reusable identity standards.
• Guide the organization through a multi-year modernization program while ensuring continuity of critical identity functions.

Skills

IAM design and governance

Microsoft Entra ID

Active Directory

Federation & SSO

Identity governance

Hybrid identity

Zero Trust concepts

Legacy IAM modernization

Education

Bachelor's degree in related field

Tools

SAML

OAuth

OpenID Connect

LDAP

Job description

The IAM Platform Lead serves as the enterprise identity and access management design authority for George Mason University, defining architecture, standards, and lifecycle models across Microsoft Entra ID, Active Directory, Shibboleth, and related services. This role provides technical stewardship over legacy Linux-hosted IAM systems while guiding the organization through a multi-year modernization program and ensuring continuity of critical identity functions. The position collaborates across cybersecurity, infrastructure, applications, HR, and other departments to establish reusable standards and resolve complex identity architecture decisions.

Key qualifications:

• Bachelor's degree in related field or equivalent combination of education and experience
• Significant experience designing, implementing, or governing enterprise IAM including Microsoft Entra ID, Active Directory, hybrid identity, federation, SSO, and identity governance
• Knowledge of Microsoft Entra ID, Active Directory, SAML, OAuth, OpenID Connect, LDAP, and Zero Trust identity control patterns
• Ability to develop enterprise architecture, standards, roadmaps, and reusable application onboarding patterns
• Ability to provide technical leadership for legacy Linux-hosted IAM services within a modernization program
• Must be U.S. citizen, lawful permanent resident, or protected individual; eligible to work in secure computing environments (ITAR/CUI)