Senior Active Directory / Identity Engineer

Job not on LinkedIn

🔥 58 minutes ago

🌽 Illinois – Remote

🌽 Illinois – Remote

💵 $135k - $175k / year

⏰ Full Time

🟠 Senior

👔 Director

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Computer World Services

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

Computer World Services is a federal-focused IT services firm that provides digital transformation, process optimization, and technology innovation to Defense and civilian federal customers. With over 30 years of hands-on experience, the company delivers enterprise-wide IT solutions and professional services, supports contract vehicles for the federal market, and emphasizes quality, compliance, and high-performance program ratings.

📋 Description

• Serve as senior technical owner for the USMEPCOM AD DS environment, maintaining domain, OU, site, trust, and Group Policy plans and architecture documentation • Install, configure, maintain, troubleshoot, and recover AD DS; administer users, computers, groups, service accounts, and directory objects • Design and maintain OU structures; manage permissions and delegated administration using least-privilege principles • Develop, test, deploy, and troubleshoot GPOs, including links, inheritance, precedence, security filtering, WMI filters, backups, and recovery • Configure, validate, and troubleshoot domain and forest trusts • Maintain AD sites, subnets, site links, replication topology, domain-controller health, SYSVOL, DFSR, time synchronization, AD-integrated DNS, and FSMO roles • Plan and execute domain-controller installation, upgrade, demotion, retirement, and supported AD-version transitions; coordinate schema extensions • Process escalated account, group, and permission changes; troubleshoot authentication, authorization, policy, trust, and replication issues • Provide advanced support during identity and authentication incidents; support root-cause analysis and corrective actions • Develop, maintain, and test AD backup, restoration, deleted-object recovery, and forest-recovery procedures; support COOP and disaster-recovery exercises • Support AD integration testing with Okta or other approved identity platforms, including synchronization, authentication flows, mappings, provisioning, and SAML, OIDC, OAuth, SCIM, or LDAP protocols • Automate directory administration, health validation, and reporting; review audit information; apply DISA STIGs and security baselines; support RMF controls, POA&M activities, and remediation • Maintain SOPs, recovery plans, configuration baselines, and directory diagrams; provide directory-service health, risk, and modernization information for program reporting • Work closely with cybersecurity, Service Desk, systems, cloud, network, application, COOP, and Government identity stakeholders

🎯 Requirements

• Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category • Minimum of eight (8) years of relevant experience in Active Directory engineering, identity engineering, Windows infrastructure, systems engineering, or a related discipline • Direct, hands-on experience engineering and administering Microsoft AD DS in an enterprise environment, including objects, OUs, GPOs, trusts, replication, schema, delegated permissions, and directory recovery • Experience troubleshooting complex authentication, authorization, Group Policy, replication, and trust issues, and planning or supporting AD backup, restoration, and forest recovery • Experience testing identity integrations or supporting identity-modernization activities, with an understanding of the distinction between core AD DS and external ICAM, federation, or cloud-identity services • Strong written, verbal, analytical, and technical problem-solving skills • Active Secret clearance or higher is required • Chicago, IL–area candidates preferred • Occasional after-hours maintenance, COOP exercises, disaster-recovery testing, incident response, on-site support, or travel may be required

🏖️ Benefits

• Reasonable accommodations for individuals with disabilities during application, interview, job performance, and employment benefits processes • Remote work arrangement • Occasional after-hours maintenance, COOP exercises, disaster-recovery testing, incident response, on-site support, or travel opportunities/requirements