Account​/Access Management Specialist

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform® provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have.

The result is a government workforce that is exponentially more creative and productive. For more information, visit www.

Empower.ai.

Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company’s commitment to hiring and supporting active-duty and veteran employees.

Empower AI is seeking a Systems Administrator (Identity and Access Management) to administer directory services, account lifecycle, and access management capabilities for a Department of War agency supported by an enterprise IT Customer Support Services program. The administrator manages Active Directory and related identity services across multiple security enclaves, supports the Active Directory orchestration and Service Now AI Ops automation that delivers Tier 0 self-service password resets and account unlocks, and serves as the Tier III escalation point for complex account, permission, and authentication issues.

As a privileged user, this role is central to both the customer experience objective of the program (resolve at the lowest tier) and its cybersecurity posture (least privilege, auditable access). This is a salaried, FLSA-exempt position in which you will independently analyze situations, determine the appropriate course of action, and exercise discretion and independent judgment on matters of significance to the program and its customers.

THIS IS AN ONSITE ROLE IN QUANTICO, VA (RKB) WITH UP TO 10% OF TRAVEL INVOLVED.

JOB DUTIES:

• Administer Active Directory domains, organizational units, groups, Group Policy, DNS/DHCP as applicable, and related identity services (e.g., Entra /Azure AD synchronization, ADFS, certificate-based authentication) across NIPRNet, SIPRNet, and JWICS enclaves.

• Manage the user, service, and privileged account lifecycle: provisioning, modification, deprovisioning, group membership, permissions, and periodic access reviews, in accordance with approved processes and least-privilege principles.

• Support, maintain, and enhance the Active Directory orchestration and Service Now AI Ops/Virtual Agent integrations that enable Tier 0 self-service password resets, account unlocks, and status checks, and measure their contribution to ticket deflection.

• Serve as the Tier III escalation point for complex authentication, authorization, CAC/PKI logon, group policy, and account issues escalated from Tier I/II, resolving PL1-PL4 tickets within PRS time frames and following the Customer-Confirmed Ticket Closure process.

• Automate identity and access management tasks with Power Shell and workflow tools, develop request fulfillment workflows with the ITSM platform team, and reduce manual account administration effort.

• Apply DISA STIGs to directory and identity systems, remediate vulnerabilities within policy time frames, support audit log review and privileged access monitoring, and provide control evidence and POA&M inputs for RMF packages in eMASS.

• Support ICAM and Zero Trust initiatives, including attribute-based access, conditional access, and identity governance improvements, and coordinate with cybersecurity, endpoint, and collaboration platform administrators.

• Maintain identity and access documentation, SOPs, knowledge articles, and Tier I enablement content, and provide account and access performance data for the Customer Support Metrics Dashboard.

REQUIREMENTS
:

• Bachelor's degree and a minimum of 3 years of related experience (an additional 4 years of related experience may be substituted for the degree).

• Must be a U.S. Citizen.

• Must have an Active Top Secret Clearance (favorably adjudicated T5/T5R) to start; this is a Privileged User position.

• Must be willing and able to obtain TS/SCI eligibility after start, if required by mission needs.

• Must be within investigation scope and/or currently enrolled in Continuous Evaluation / Continuous Vetting.

• Must possess and maintain a current DoD 8570/8140 IAT Level II…