Senior Active Directory (AD) Engineer

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Senior Active Directory (AD) Engineer to support KITS and our government customer in Carson, CA. This position is for a future new business opportunity and may require support at other locations including Columbus, OH, Bedford, MA, Fort Lee, VA, and Smyrna, GA.

About the role

This execution-oriented role ensures the customer’s global directory services remain secure, compliant with Department of Defense (DoD) mandates, and highly available for thousands of users across multiple sites.

Responsibilities

• Design and maintain the customer’s Active Directory architecture, including forest trusts, domain controllers, and site topologies to ensure seamless replication across the network.
• Implement and support Identity, Credential, and Access Management (ICAM) solutions, including integration of Azure Active Directory (Entra ID) for hybrid cloud environments and Office 365.
• Harden the AD environment by applying DISA STIGs (Security Technical Implementation Guides), including managing the Tier Model (Tier 0, 1, 2) to prevent privilege escalation and lateral movement.
• Create, test, and manage complex Group Policy Objects (GPOs) to enforce security settings and software configurations across the enterprise.
• Develop and maintain advanced PowerShell scripts to automate routine tasks such as bulk account provisioning, auditing, and health checks.

Requirements

• At least 8–10+ years of experience managing large-scale, distributed AD environments, specifically within a DoD or federal context.
• Deep expertise in AD DS, ADFS (Federation Services), Azure AD Connect, and PKI (Public Key Infrastructure)/Certificate Services.
• Experience with Active Directory environments featuring multiple forests in an enterprise setting, Lightweight Directory Access Protocol (LDAP) directories, Public Key Infrastructure (PKI) systems, Enterprise Identity, Credential and Access Management (e-ICAM), and enclaves.

Qualifications

• Must meet IAT Level II or III requirements under DoD 8570, including certifications such as Security+ CE and a computing environment certification like Microsoft Certified: Identity and Access Administrator Associate.
• Clearance: Most roles require at least a Secret clearance, with some requiring Top Secret (TS/SCI) depending on system sensitivity.

Benefits

• Health, dental, and vision insurance
• 401K with company matching
• Flexible spending accounts
• Paid holidays
• Three weeks paid time off