Active Directory Engineer – Journeyman

Job not on LinkedIn

🕒 3 days ago

🌽 Illinois – Remote

🌽 Illinois – Remote

💵 $130k - $150k / year

⏰ Full Time

🔴 Lead

👔 Director

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Computer World Services

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

Computer World Services is a federal-focused IT services firm that provides digital transformation, process optimization, and technology innovation to Defense and civilian federal customers. With over 30 years of hands-on experience, the company delivers enterprise-wide IT solutions and professional services, supports contract vehicles for the federal market, and emphasizes quality, compliance, and high-performance program ratings.

📋 Description

• Administer, sustain, secure, troubleshoot, and recover the Microsoft Active Directory Domain Services environment supporting the USMEPCOM ENLIST program • Manage directory objects, organizational units, Group Policy Objects, trusts, replication, schema changes, delegated permissions, domain services, and recovery capabilities • Install, configure, maintain, troubleshoot, and recover AD DS; manage users, computers, groups, service accounts, and other directory objects • Implement and maintain OU structures, permissions, and delegated administration using least-privilege principles • Develop, test, deploy, and troubleshoot GPOs and assess changes for security and customer impact • Configure and troubleshoot domain and forest trusts, AD sites, subnets, site links, replication topology, domain-controller health, SYSVOL, DFSR, time synchronization, AD-integrated DNS, and FSMO roles • Support domain-controller installation, upgrades, demotion, retirement, supported AD-version transitions, and controlled schema extensions • Process escalated account, group, and permission changes and troubleshoot authentication, authorization, policy, trust, and replication issues • Provide advanced support during identity and authentication incidents, including root-cause analysis and corrective actions • Maintain and execute AD backup, restoration, deleted-object recovery, and forest-recovery procedures; support COOP and disaster-recovery exercises • Support integration testing between AD and Okta or other approved identity platforms, including synchronization, authentication flows, mappings, provisioning, and identity protocols • Automate directory administration, health validation, and reporting; review audit information; apply DISA STIGs and security baselines; support RMF controls and remediation • Maintain SOPs, recovery plans, configuration baselines, and directory diagrams; provide health, risk, and modernization reporting • Collaborate with cybersecurity, Service Desk, systems, cloud, network, application, COOP, and Government identity stakeholders

🎯 Requirements

• Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category • Minimum of six (6) years of relevant experience in Active Directory administration, identity engineering, Windows infrastructure, systems engineering, or a related discipline • Direct, hands-on experience administering Microsoft AD DS in an enterprise environment, including objects, OUs, GPOs, trusts, replication, schema, delegated permissions, and directory recovery • Experience troubleshooting authentication, authorization, Group Policy, replication, and trust issues, and supporting AD backup, restoration, and disaster recovery • Experience testing identity integrations or supporting identity-modernization activities, with an understanding of the distinction between core AD DS and external ICAM, federation, or cloud-identity services • Strong written, verbal, analytical, and technical problem-solving skills • Active Secret clearance or higher is required • Preferred: Experience integrating AD with Okta, and with Microsoft Entra ID or hybrid identity • Preferred: Experience supporting federal or DoD identity environments, including CAC, PIV, certificate-based authentication, and PKI • Preferred: Experience with SAML, OIDC, OAuth, SCIM, LDAP, Kerberos, NTLM, AD FS, or comparable federation technologies • Preferred: Experience with PowerShell for AD administration and automation • Preferred: Experience applying DISA STIGs to AD and Windows infrastructure and supporting RMF authorization activities • Preferred: Familiarity with Zero Trust identity principles and privileged-access, identity-governance, or audit tools

🏖️ Benefits

• Affirmative action and equal employment opportunity • Reasonable accommodations for individuals with disabilities • Occasional after-hours maintenance, COOP exercises, disaster-recovery testing, incident response, on-site support, or travel may be required

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume