Active Directory Engineer

Responsibilities

• Design, configure, and maintain Group Policy Objects (GPOs) across Active Directory environments in alignment with DISA STIG requirements and organizational security policies.
• Manage identity lifecycle workflows including user provisioning, modification, and deprovisioning across classified and unclassified systems.
• Execute user onboarding processes, including account creation, role assignment, access provisioning, and documentation in accordance with RBAC frameworks.
• Perform ongoing operational maintenance of Active Directory infrastructure including replication monitoring, DNS health, domain controller management, and schema updates.
• Support the enforcement of least‑privilege access principles through regular access reviews and role‑based permission audits.
• Assist senior engineers with trust configuration, ADFS operations, and identity federation maintenance tasks.
• Troubleshoot and resolve Active Directory, GPO, and identity‑related issues in a timely manner.
• Support ATO documentation, RMF activities, and continuous monitoring efforts in coordination with the cybersecurity team.
• Maintain accurate technical documentation including GPO inventories, identity workflow diagrams, and operational runbooks.

Requirements

• 5–7+ years of hands‑on experience in systems engineering or systems administration with a focus on Active Directory and identity management.
• Solid working knowledge of Group Policy configuration, management, and troubleshooting in enterprise environments.
• Experience managing identity lifecycle workflows including user provisioning and deprovisioning processes.
• Familiarity with RBAC frameworks, delegation models, and least‑privilege access principles.
• Working knowledge of Active Directory operational health including replication, DNS, and domain controller management.
• Familiarity with DISA STIGs and their application to directory services and identity infrastructure.
• Active Top Secret security clearance required; TS/SCI eligibility preferred.
• Microsoft certifications (MCSA, MCSE, or equivalent) a plus.

Preferred Qualifications

• Prior experience in a DoD, IC, or cleared defense contractor environment.
• Familiarity with ADFS, SSO federation, and identity provider operations.
• Working knowledge of RMF, NIST 800‑53, and the ATO process.
• Experience with PowerShell scripting for Active Directory automation and reporting.
• Familiarity with PKI infrastructure and certificate services in a DoD environment.
• Bachelor's degree in Information Technology, Computer Science, Systems Engineering, or a related field; equivalent experience considered.
• DoD 8570/8140 IAT Level II certification (Security+, or equivalent).

Skills

• Systems engineering
• Active Directory administration
• Group Policy configuration and troubleshooting
• Identity lifecycle workflow design and execution
• User onboarding and role‑based access control
• Operational maintenance of directory services

Pay

The pay range for this position is $60.00 – $65.00 per hour. Individual compensation within this range will depend on qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent factors.

Benefits

• Medical, dental, and vision coverage
• Critical Illness, Accident, and Hospital insurance
• 401(k) retirement plan – pre‑tax and Roth post‑tax contributions
• Life Insurance (voluntary life & AD&D for employee and dependents)
• Short‑ and long‑term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Paid time off, vacation, or sick leave

Schedule

Fully onsite position in Dallas, TX.