TS-Systems Engineer

What You'll Do
-Design, configure, and maintain Group Policy Objects (GPOs) across Active Directory environments in alignment with DISA STIG requirements and organizational security policies
-Manage identity lifecycle workflows including user provisioning, modification, and deprovisioning across classified and unclassified systems
-Execute user onboarding processes, including account creation, role assignment, access provisioning, and documentation in accordance with RBAC frameworks
-Perform ongoing operational maintenance of Active Directory infrastructure including replication monitoring, DNS health, domain controller management, and schema updates
-Support the enforcement of least-privilege access principles through regular access reviews and role-based permission audits
-Assist senior engineers with trust configuration, ADFS operations, and identity federation maintenance tasks
-Troubleshoot and resolve Active Directory, GPO, and identity-related issues in a timely manner
-Support ATO documentation, RMF activities, and continuous monitoring efforts in coordination with the cybersecurity team
-Maintain accurate technical documentation including GPO inventories, identity workflow diagrams, and operational runbooks
What You Bring
-5–7+ years of hands-on experience in systems engineering or systems administration with a focus on Active Directory and identity management
-Solid working knowledge of Group Policy configuration, management, and troubleshooting in enterprise environments
-Experience managing identity lifecycle workflows including user provisioning and deprovisioning processes
-Familiarity with RBAC frameworks, delegation models, and least-privilege access principles
-Working knowledge of Active Directory operational health including replication, DNS, and domain controller management
-Familiarity with DISA STIGs and their application to directory services and identity infrastructure
-Active Top Secret security clearance required; TS/SCI eligibility preferred
-Microsoft certifications (MCSA, MCSE, or equivalent) a plus
Preferred Qualifications
-Prior experience in a DoD, IC, or cleared defense contractor environment
-Familiarity with ADFS, SSO federation, and identity provider operations
-Working knowledge of RMF, NIST 800-53, and the ATO process
-Experience with PowerShell scripting for Active Directory automation and reporting
-Familiarity with PKI infrastructure and certificate services in a DoD environment
-Bachelor's degree in Information Technology, Computer Science, Systems Engineering, or a related field; equivalent experience considered
-DoD 8570/8140 IAT Level II certification (Security+, or equivalent)