Senior Active Directory / Identity Engineer

Job not on LinkedIn

🕒 3 days ago

🌽 Illinois – Remote

🌽 Illinois – Remote

💵 $135k - $175k / year

⏰ Full Time

🟠 Senior

👔 Director

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Computer World Services

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

Computer World Services is a federal-focused IT services firm that provides digital transformation, process optimization, and technology innovation to Defense and civilian federal customers. With over 30 years of hands-on experience, the company delivers enterprise-wide IT solutions and professional services, supports contract vehicles for the federal market, and emphasizes quality, compliance, and high-performance program ratings.

📋 Description

• Serve as senior technical owner for the USMEPCOM AD DS environment, maintaining domain, OU, site, trust, and Group Policy plans and architecture documentation • Install, configure, maintain, troubleshoot, and recover AD DS; administer users, computers, groups, service accounts, and directory objects • Design and maintain OU structures; manage permissions and delegated administration using least-privilege principles • Develop, test, deploy, and troubleshoot GPOs, including links, inheritance, precedence, security filtering, WMI filters, backups, and recovery • Configure, validate, and troubleshoot domain and forest trusts • Maintain AD sites, subnets, site links, replication topology, domain-controller health, SYSVOL, DFSR, time synchronization, AD-integrated DNS, and FSMO roles • Plan and execute domain-controller installation, upgrade, demotion, retirement, and supported AD-version transitions; coordinate schema extensions • Process escalated account, group, and permission changes; troubleshoot authentication, authorization, policy, trust, and replication issues • Provide advanced support during identity and authentication incidents; support root-cause analysis and corrective actions • Develop, maintain, and test AD backup, restoration, deleted-object recovery, and forest-recovery procedures; support COOP and disaster-recovery exercises • Support AD integration testing with Okta or other approved identity platforms, including synchronization, authentication flows, mappings, provisioning, and SAML, OIDC, OAuth, SCIM, or LDAP protocols • Automate directory administration, health validation, and reporting; review audit information; apply DISA STIGs and security baselines; support RMF controls, POA&M activities, and remediation • Maintain SOPs, recovery plans, configuration baselines, and directory diagrams; provide directory-service health, risk, and modernization information for program reporting • Work closely with cybersecurity, Service Desk, systems, cloud, network, application, COOP, and Government identity stakeholders

🎯 Requirements

• Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category • Minimum of eight (8) years of relevant experience in Active Directory engineering, identity engineering, Windows infrastructure, systems engineering, or a related discipline • Direct, hands-on experience engineering and administering Microsoft AD DS in an enterprise environment, including objects, OUs, GPOs, trusts, replication, schema, delegated permissions, and directory recovery • Experience troubleshooting complex authentication, authorization, Group Policy, replication, and trust issues, and planning or supporting AD backup, restoration, and forest recovery • Experience testing identity integrations or supporting identity-modernization activities, with an understanding of the distinction between core AD DS and external ICAM, federation, or cloud-identity services • Strong written, verbal, analytical, and technical problem-solving skills • Active Secret clearance or higher is required • Chicago, IL–area candidates preferred • Occasional after-hours maintenance, COOP exercises, disaster-recovery testing, incident response, on-site support, or travel may be required

🏖️ Benefits

• Reasonable accommodations for individuals with disabilities during application, interview, job performance, and employment benefits processes • Remote work arrangement • Occasional after-hours maintenance, COOP exercises, disaster-recovery testing, incident response, on-site support, or travel opportunities/requirements

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume