Active Directory Endpoint Policy Manager

Job Title:

Active Directory Endpoint Policy Manager

Job Category:
Information Technology

Time Type:
Full time

Minimum Clearance Required to Start:
Secret

Employee Type:
Regular

Percentage of

Travel Required:

Up to 10%

Type of Travel:
Continental US

Join our dynamic team as an Active Directory Endpoint Policy Manager, where you’ll play a crucial role in supporting the Air Force’s Enterprise IT as a Service program. In this exciting position, you’ll be the guardian of our endpoint security, ensuring that all devices comply with the highest standards of security and performance. You’ll work closely with our talented Intune team to prepare for future migrations, leveraging your familiarity with Microsoft Intune.

Get ready to make a significant impact in a high-stakes environment while enjoying an exciting and collaborative work atmosphere.

• Craft, implement, and maintain Group Policy Objects (GPOs) to fortify endpoint security across the enterprise.

• Ensure all endpoints adhere to Air Force security policies and standards.
• Conduct regular audits and assessments to identify and remediate non-compliance.
• Collaborate with our security wizards to integrate cutting-edge security practices into endpoint policies.
• Monitor and report on the effectiveness of endpoint policies, suggesting improvements to keep us ahead of the curve.

• Familiarity with AD Sites and Services to design/troubleshoot new program office locations.
• Ensure optimal performance and availability of AD services across all sites.
• Implement and maintain site‑specific policies and configurations.

• Create and maintain security groups for tool‑based RBAC delegations.
• Ensure appropriate access levels are assigned to users and groups based on their roles and responsibilities.
• Review and update access permissions regularly to align with organizational changes.

• Create and configure service accounts as required by various applications and services.
• Ensure service accounts adhere to security best practices, including the use of strong passwords and limited privileges.
• Monitor and audit service account usage to detect any anomalies or misuse.

• Provide secondary support to other team members for AD‑related dependencies.
• Collaborate with IT staff to ensure seamless integration of AD services with other enterprise systems.
• Document processes and procedures related to endpoint policy management and AD configurations.

• Gain and maintain familiarity with Microsoft Intune to support future migrations and enhancements.
• Work alongside our Intune team to ensure a smooth transition and integration of Intune services.

Required:

• Active Secret clearance.
• 10+ Years of relevant experience (Bachelor’s Degree in applicable field may be substituted for 5 years of experience).
• Minimum of 5 years of experience in Active Directory administration, with a strong focus on endpoint policy management and security hardening.
• Must be proficiency in Microsoft Active Directory and Group Policy management.
• Strong understanding of AD Sites and Services and its configuration.
• Experience with role‑based access control (RBAC) and security group management.
• Knowledge of endpoint security best practices and compliance standards.
• Excellent problem‑solving and troubleshooting skills.
• Strong communication and collaboration abilities.
• Familiarity with Microsoft Intune (expertise not required).
• Willingness to stay updated with the latest cybersecurity trends and emerging security tools.
• Required DoD 8140 compliant certification such as CompTIA Security Desired:
• Service Now integrated workflows/automation
• Microsoft Federation Services
• Advanced Power Shell scripting or prior software development experience
• DoD PKI

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high‑performing group dedicated to our customer’s missions and driven by a higher purpose — to ensure the safety of our nation.

CACI values the…