Active Directory, Identity Engineer – Journeyman

Job not on LinkedIn

🔥 0 minutes ago

🌽 Illinois – Remote

🌽 Illinois – Remote

⏰ Full Time

🔴 Lead

👔 Director

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DecisionPoint Corporation

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2011

🎖️ Defense

💼 Consulting

📦 Logistics

Defense • Consulting • Logistics

DecisionPoint Corporation is a Service Disabled Veteran Owned Small Business specializing in IT modernization and digital transformation for government agencies. They provide comprehensive services including cybersecurity, health IT, and intelligent automation solutions, aimed at improving operational efficiency and effectiveness while ensuring secure cloud migration. Their Centers of Excellence approach drives mission success by addressing the most pressing challenges faced by government entities through innovative technology and expert support.

📋 Description

• Administer, maintain, update, troubleshoot, and recover Microsoft Active Directory Domain Services • Create, modify, disable, delete, and maintain authorized AD objects • Manage users, computers, groups, service accounts, organizational units, shared resources, and related directory objects • Maintain domain, OU, site, trust, Group Policy, administrative-design, architecture, replication, and object-management documentation • Manage OU-level permissions and delegated administrative access using least-privilege principles • Develop, test, deploy, maintain, and troubleshoot Group Policy Objects and related settings • Configure, validate, monitor, and troubleshoot domain and forest trusts • Maintain AD sites, subnets, site links, replication schedules, and replication topology • Support domain controllers, directory databases, SYSVOL, DFS Replication, time synchronization, and AD-integrated DNS dependencies • Support domain-controller installation, configuration, replacement, upgrade, demotion, and retirement • Assist with Active Directory version transitions and controlled schema updates or extensions • Process approved account, group, permission, and OU changes escalated through Service Desk and access-management processes • Troubleshoot authentication, authorization, account, group-membership, policy, trust, replication, and directory-permission issues • Provide advanced support during identity, authentication, domain, and access-management incidents • Collect evidence for root-cause analysis and implement approved corrective and preventive actions • Maintain and execute Active Directory backup, restoration, deleted-object recovery, and forest-recovery procedures • Support COOP exercises, disaster-recovery tests, recovery validation, and continuity events • Support testing of ICAM and identity-modernization technologies, including integrations with Okta and approved identity platforms • Validate identity synchronization, authentication flows, attribute mappings, group mappings, account linking, provisioning, and access controls • Test approved federation and modern authentication protocols such as SAML, OpenID Connect, OAuth, SCIM, and LDAP • Develop test cases, rollback steps, validation procedures, and document defects and test results • Coordinate identity-integration activities with cybersecurity, application, cloud, network, and Government identity teams • Automate approved AD administration, health validation, reporting, and audit activities • Apply approved Active Directory security baselines and DISA Security Technical Implementation Guides • Support vulnerability remediation, Risk Management Framework controls, evidence collection, assessments, and corrective actions • Follow incident, problem, change, configuration, access, release, security, and quality-management processes • Provide directory-service health, risk, issue, recovery, and modernization information for program reporting

🎯 Requirements

• Active Secret clearance or higher • Bachelor’s degree in information technology, information systems, or a related field, or equivalent professional experience where permitted by the applicable labor category • Minimum of six years of relevant experience in Active Directory administration, identity engineering, Windows infrastructure, systems engineering, or a related technical discipline • Direct, hands-on experience administering Microsoft Active Directory Domain Services in an enterprise environment • Experience managing AD objects, organizational units, Group Policy Objects, trusts, replication, schemas, delegated permissions, and directory recovery • Experience troubleshooting authentication, authorization, Group Policy, replication, trust, and directory-services issues • Experience supporting Active Directory backup, restoration, disaster recovery, or deleted-object recovery • Experience testing identity integrations or supporting enterprise identity-modernization activities • Understanding of the distinction between core AD DS responsibilities and external ICAM, federation, or cloud-identity services • Knowledge of enterprise identity security, least privilege, delegated administration, account management, and access-control principles • Ability to maintain architecture diagrams, domain and OU documentation, Group Policy records, recovery procedures, and technical standards • Ability to support after-hours maintenance, COOP exercises, disaster-recovery testing, and critical incidents when required • Strong written, verbal, analytical, and technical problem-solving skills

🏖️ Benefits

• Regular full-time employment • Remote work arrangement • Chicago-area candidates preferred • Potential after-hours maintenance, COOP exercises, incident response, on-site support, or travel opportunities/requirements