Active Directory Engineer – Journeyman

Stelle nicht auf LinkedIn

🕒 vor 14 Tagen

🌽 Illinois – Remote

🌽 Illinois – Remote

💵 $130.000 - $150.000 / Jahr

⏰ Vollzeit

🔴 Experte

👔 Direktor

👻 Geisterscore 0%

Was es bedeutet: die Wahrscheinlichkeit, dass für diese Stelle niemand wirklich einstellt.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Warum dieser Wert:

• Seit 15 Tagen offen.
• Stellen bei diesem Unternehmen werden meist in 84 Tagen besetzt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

Computer World Services

WebsiteLinkedInAlle Stellen

11 - 50 Mitarbeiter

💼 Beratung

🎖️ Verteidigung

📦 Logistik

Consulting • Defense • Logistics

Computer World Services ist ein auf den öffentlichen Sektor spezialisiertes IT-Dienstleistungsunternehmen, das digitale Transformation, Prozessoptimierung und technologische Innovation für Verteidigungs- und zivile Bundesbehörden anbietet. Mit über 30 Jahren praktischer Erfahrung liefert das Unternehmen umfassende IT-Lösungen und professionelle Dienstleistungen, unterstützt Vertragsvehikel für den Bundesmarkt und legt Wert auf Qualität, Compliance und hohe Leistungsbewertung von Programmen.

Beschreibung

• Administer, sustain, secure, troubleshoot, and recover the Microsoft Active Directory Domain Services environment supporting the USMEPCOM ENLIST program • Manage directory objects, organizational units, Group Policy Objects, trusts, replication, schema changes, delegated permissions, domain services, and recovery capabilities • Install, configure, maintain, troubleshoot, and recover AD DS; manage users, computers, groups, service accounts, and other directory objects • Implement and maintain OU structures, permissions, and delegated administration using least-privilege principles • Develop, test, deploy, and troubleshoot GPOs and assess changes for security and customer impact • Configure and troubleshoot domain and forest trusts, AD sites, subnets, site links, replication topology, domain-controller health, SYSVOL, DFSR, time synchronization, AD-integrated DNS, and FSMO roles • Support domain-controller installation, upgrades, demotion, retirement, supported AD-version transitions, and controlled schema extensions • Process escalated account, group, and permission changes and troubleshoot authentication, authorization, policy, trust, and replication issues • Provide advanced support during identity and authentication incidents, including root-cause analysis and corrective actions • Maintain and execute AD backup, restoration, deleted-object recovery, and forest-recovery procedures; support COOP and disaster-recovery exercises • Support integration testing between AD and Okta or other approved identity platforms, including synchronization, authentication flows, mappings, provisioning, and identity protocols • Automate directory administration, health validation, and reporting; review audit information; apply DISA STIGs and security baselines; support RMF controls and remediation • Maintain SOPs, recovery plans, configuration baselines, and directory diagrams; provide health, risk, and modernization reporting • Collaborate with cybersecurity, Service Desk, systems, cloud, network, application, COOP, and Government identity stakeholders

🎯 Anforderungen

• Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category • Minimum of six (6) years of relevant experience in Active Directory administration, identity engineering, Windows infrastructure, systems engineering, or a related discipline • Direct, hands-on experience administering Microsoft AD DS in an enterprise environment, including objects, OUs, GPOs, trusts, replication, schema, delegated permissions, and directory recovery • Experience troubleshooting authentication, authorization, Group Policy, replication, and trust issues, and supporting AD backup, restoration, and disaster recovery • Experience testing identity integrations or supporting identity-modernization activities, with an understanding of the distinction between core AD DS and external ICAM, federation, or cloud-identity services • Strong written, verbal, analytical, and technical problem-solving skills • Active Secret clearance or higher is required • Preferred: Experience integrating AD with Okta, and with Microsoft Entra ID or hybrid identity • Preferred: Experience supporting federal or DoD identity environments, including CAC, PIV, certificate-based authentication, and PKI • Preferred: Experience with SAML, OIDC, OAuth, SCIM, LDAP, Kerberos, NTLM, AD FS, or comparable federation technologies • Preferred: Experience with PowerShell for AD administration and automation • Preferred: Experience applying DISA STIGs to AD and Windows infrastructure and supporting RMF authorization activities • Preferred: Familiarity with Zero Trust identity principles and privileged-access, identity-governance, or audit tools

🏖️ Vorteile

• Affirmative action and equal employment opportunity • Reasonable accommodations for individuals with disabilities • Occasional after-hours maintenance, COOP exercises, disaster-recovery testing, incident response, on-site support, or travel may be required

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen