Active Directory Engineer – Journeyman

Job not on LinkedIn

🔥 0 minutes ago

🌽 Illinois – Remote

🌽 Illinois – Remote

💵 $130k - $150k / year

⏰ Full Time

🔴 Lead

👔 Director

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Computer World Services

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

Computer World Services is a federal-focused IT services firm that provides digital transformation, process optimization, and technology innovation to Defense and civilian federal customers. With over 30 years of hands-on experience, the company delivers enterprise-wide IT solutions and professional services, supports contract vehicles for the federal market, and emphasizes quality, compliance, and high-performance program ratings.

📋 Description

• Administer, sustain, secure, troubleshoot, and recover the Microsoft Active Directory Domain Services environment supporting the USMEPCOM ENLIST program • Manage directory objects, organizational units, Group Policy Objects, trusts, replication, schema changes, delegated permissions, domain services, and recovery capabilities • Install, configure, maintain, troubleshoot, and recover AD DS; manage users, computers, groups, service accounts, and other directory objects • Implement and maintain OU structures, permissions, and delegated administration using least-privilege principles • Develop, test, deploy, and troubleshoot GPOs and assess changes for security and customer impact • Configure and troubleshoot domain and forest trusts, AD sites, subnets, site links, replication topology, domain-controller health, SYSVOL, DFSR, time synchronization, AD-integrated DNS, and FSMO roles • Support domain-controller installation, upgrades, demotion, retirement, supported AD-version transitions, and controlled schema extensions • Process escalated account, group, and permission changes and troubleshoot authentication, authorization, policy, trust, and replication issues • Provide advanced support during identity and authentication incidents, including root-cause analysis and corrective actions • Maintain and execute AD backup, restoration, deleted-object recovery, and forest-recovery procedures; support COOP and disaster-recovery exercises • Support integration testing between AD and Okta or other approved identity platforms, including synchronization, authentication flows, mappings, provisioning, and identity protocols • Automate directory administration, health validation, and reporting; review audit information; apply DISA STIGs and security baselines; support RMF controls and remediation • Maintain SOPs, recovery plans, configuration baselines, and directory diagrams; provide health, risk, and modernization reporting • Collaborate with cybersecurity, Service Desk, systems, cloud, network, application, COOP, and Government identity stakeholders

🎯 Requirements

• Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category • Minimum of six (6) years of relevant experience in Active Directory administration, identity engineering, Windows infrastructure, systems engineering, or a related discipline • Direct, hands-on experience administering Microsoft AD DS in an enterprise environment, including objects, OUs, GPOs, trusts, replication, schema, delegated permissions, and directory recovery • Experience troubleshooting authentication, authorization, Group Policy, replication, and trust issues, and supporting AD backup, restoration, and disaster recovery • Experience testing identity integrations or supporting identity-modernization activities, with an understanding of the distinction between core AD DS and external ICAM, federation, or cloud-identity services • Strong written, verbal, analytical, and technical problem-solving skills • Active Secret clearance or higher is required • Preferred: Experience integrating AD with Okta, and with Microsoft Entra ID or hybrid identity • Preferred: Experience supporting federal or DoD identity environments, including CAC, PIV, certificate-based authentication, and PKI • Preferred: Experience with SAML, OIDC, OAuth, SCIM, LDAP, Kerberos, NTLM, AD FS, or comparable federation technologies • Preferred: Experience with PowerShell for AD administration and automation • Preferred: Experience applying DISA STIGs to AD and Windows infrastructure and supporting RMF authorization activities • Preferred: Familiarity with Zero Trust identity principles and privileged-access, identity-governance, or audit tools

🏖️ Benefits

• Affirmative action and equal employment opportunity • Reasonable accommodations for individuals with disabilities • Occasional after-hours maintenance, COOP exercises, disaster-recovery testing, incident response, on-site support, or travel may be required