Senior Active Directory / Identity Engineer

🕒 4 days ago

🌽 Illinois – Remote

🌽 Illinois – Remote

⏰ Full Time

🟠 Senior

👔 Director

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 25%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

DecisionPoint Corporation

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2011

🎖️ Defense

💼 Consulting

📦 Logistics

Defense • Consulting • Logistics

DecisionPoint Corporation is a Service Disabled Veteran Owned Small Business specializing in IT modernization and digital transformation for government agencies. They provide comprehensive services including cybersecurity, health IT, and intelligent automation solutions, aimed at improving operational efficiency and effectiveness while ensuring secure cloud migration. Their Centers of Excellence approach drives mission success by addressing the most pressing challenges faced by government entities through innovative technology and expert support.

📋 Description

• Serve as the senior technical owner for the USMEPCOM Active Directory Domain Services environment • Install, configure, maintain, update, troubleshoot, and recover Active Directory services and supporting components • Manage AD objects, organizational units, users, computers, groups, service accounts, shared resources, and directory permissions • Maintain domain, organizational-unit, site, trust, Group Policy, and related architecture documentation • Develop, test, implement, maintain, and troubleshoot Group Policy Objects and related settings • Manage trust relationships, AD sites, subnets, site links, replication schedules, and replication topology • Maintain domain controller, directory database, SYSVOL, DFS Replication, time synchronization, and AD-integrated DNS health • Plan and execute domain-controller installation, replacement, upgrade, demotion, and retirement • Manage AD schema governance and evaluate schema-change requests • Administer escalated account and group changes and troubleshoot authentication, authorization, policy, trust, replication, and directory-permission issues • Provide advanced engineering support during identity, authentication, domain, and access-management incidents • Develop, test, and maintain Active Directory backup, restoration, and forest-recovery procedures • Support COOP exercises, disaster-recovery testing, recovery validation, and continuity events • Evaluate and test approved ICAM and identity-modernization technologies, including integrations with Okta or other approved platforms • Validate identity synchronization, account linking, authentication flows, mappings, provisioning, access controls, and failure handling • Support testing of SAML, OpenID Connect, OAuth, SCIM, LDAP, or comparable technologies • Automate approved directory administration, health validation, reporting, audit, and configuration activities • Support DISA STIGs, RMF controls, assessment evidence, POA&M activities, and authorization documentation • Maintain standard operating procedures, recovery plans, configuration baselines, change records, test results, and technical documentation • Provide directory-service health, availability, capacity, risk, modernization, and recovery information for program reporting

🎯 Requirements

• Active Secret clearance or higher • Bachelor’s degree in information technology, information systems, or a related field, or equivalent professional experience where permitted by the applicable labor category • Minimum of eight years of relevant experience in Active Directory engineering, identity engineering, Windows infrastructure, systems engineering, or a related technical discipline • Direct, hands-on experience engineering and administering Microsoft Active Directory Domain Services in an enterprise environment • Experience managing AD objects, organizational units, Group Policy Objects, trusts, replication, schemas, delegated permissions, and directory recovery • Experience troubleshooting complex authentication, authorization, Group Policy, replication, trust, and directory-services issues • Experience planning or supporting Active Directory backup, restoration, disaster recovery, or forest recovery • Experience testing identity integrations or evaluating enterprise identity-modernization technologies • Understanding of the distinction between core AD DS administration and external ICAM, federation, or cloud-identity services • Knowledge of enterprise identity security, least privilege, delegated administration, account management, and access-control principles • Ability to develop and maintain architecture diagrams, domain plans, OU plans, Group Policy documentation, trust diagrams, recovery procedures, and technical standards • Ability to support after-hours maintenance, COOP exercises, disaster-recovery testing, and critical incident response when required • Strong written, verbal, analytical, and technical problem-solving skills

🏖️ Benefits

• Regular full-time employment • Remote work arrangement • Chicago-area candidates preferred • Occasional after-hours maintenance, incident response, COOP exercises, on-site support, or travel may be required

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume