Senior Active Directory Engineer - Top Secret

Job Qualifications

• Active Directory (AD)
• Azure Active Directory (AD)
• Systems Design
• Systems Engineering

• Type of Requisition:
  Regular
• Clearance Level Must Currently Possess:
  Top Secret
• Clearance Level Must Be Able To Obtain:
  Top Secret/SCI
• Public Trust/Other
  
  Required:
  
  None
• Job Family: IT Infrastructure and Operations
• Skills:
  
  Active Directory (AD), Azure Active Directory (AD), Systems Design, Systems Engineering
• Certifications:
  
  None
• Experience:
  
  10+ years of related experience
• US Citizenship
  
  Required:
  
  Yes
• Position Title:
  
  Senior Active Directory Engineer

Advance how our customers operate while you advance your career. Join GDIT as a Senior Active Directory Engineer and build an impactful career in enterprise IT, collaborating with people who are driven and resourceful like you.

As a Senior Active Directory Engineer, the work you’ll do at GDIT will be directly impactful to the customer’s mission. You will play a crucial role in designing, implementing, and managing advanced Active Directory and related identity solutions to optimize the customer’s enterprise environment.

• Engineer, manage, monitor, maintain, troubleshoot, and update Active Directory and related directory services.
• Support and optimize identity and authentication systems.
• Provide technical leadership and escalation support for complex identity, access, authentication, and centralized resource management issues.
• Autonomously handle and resolve critical technical incidents, ensuring the reliability, security, and performance of Active Directory and directory services.
• Develop and maintain automation and orchestration to streamline maintenance, configuration management, and monitoring of directory services systems.
• Implement and enforce security best practices for identity and access management, including hardening, auditing, and compliance with applicable standards.
• Create and maintain technical documentation, standard operating procedures, and runbooks for directory services operations and incident response.
• Evaluate, test, and recommend new tools and technologies to enhance and modernize the directory services and identity environment.
• Participate in on‑call rotations and change management processes to support mission needs as required.

• Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, or a related field – Additional relevant experience may be substituted for formal education.
• Minimum of 8–10 years of hands‑on experience engineering and managing Active Directory in large, complex enterprise environments.
• Demonstrated proficiency with:
  • Active Directory design, administration, and troubleshooting
  • Group Policy design and management
  • DNS, DHCP, and related Windows infrastructure services
  • Hybrid identity solutions
  • Authentication and authorization protocols
• Strong understanding of system security, identity lifecycle management, and access control methodologies.
• Proficiency with Power Shell and other scripting languages for automation, reporting, and configuration management.
• Relevant certifications strongly desired, such as:
  • Microsoft:
    Windows Server Hybrid Administrator, Azure Administrator, Azure Security Engineer, MCSE (or successor)
  • Cloud:
    Azure or AWS Administrator/Security certifications

The likely salary range for this position is $148,750 - $201,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

• Scheduled Weekly
  
  Hours:
  
  40
• Travel Required:
  
  Less than 10%
• Telecommuting Options:
  Hybrid
• Work Location:
  
  USA DC Washington
• Additional Work Locations:
  None

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post‑tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where…