Senior Active Directory; AD Engineer

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Senior Active Directory (AD) Engineer to support KITS and our government customer in Carson, CA. This position is a Future New Business Opportunity and may require support at other locations including Columbus, OH, Bedford, MA, Fort Lee, VA, and Smyrna, GA.

• Experience with an Active Directory environment with multiple forests in an enterprise environment, Lightweight Directory Access Protocol (LDAP) directories, Public Key Infrastructure (PKI) systems, Enterprise Identity, Credential and Access Management (e-ICAM) and enclaves.
• Design and maintain the customer’s Active Directory architecture, including forest trusts, domain controllers, and site topologies to ensure seamless replication across the Network.
• Implement and support Identity, Credential, and Access Management (ICAM) solutions, including the integration of Azure Active Directory (Entra ) for hybrid cloud environments and Office 365.
• Hardening the AD environment by applying DISA Security Technical Implementation Guides (STIGs); manage the Tier Model (Tier 0, 1,
  2) to prevent privilege escalation and lateral movement.
• Create, test, and manage complex Group Policy Objects (GPOs) to enforce security settings and software configurations across the enterprise.
• Develop and maintain advanced Power Shell scripts to automate routine tasks such as bulk account provisioning, auditing, and health checks.

• Clearance Requirement:
  Most roles require at least a Secret clearance; some require Top Secret (TS/SCI) depending on system sensitivity.
• Certifications (DoD 8570):
  Must meet IAT Level II or III requirements (e.g., Security+ CE and a computing environment certification like Microsoft Certified: Identity and Access Administrator Associate).
• Experience:
  
  8–10+ years managing large-scale, distributed AD environments, specifically within a DoD or federal context.
• Technical
  
  Skills:
  
  Deep expertise in AD DS, ADFS (Federation Services), Azure AD Connect, and PKI (Public Key Infrastructure)/Certificate Services.

• Competitive compensation
• Health, dental and vision insurance
• 401(k) with company matching
• Flexible spending accounts
• Paid holidays
• Three weeks paid time off

Equal Employment Opportunity

The company is an equal‑opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law.

We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352