Senior Active Directory Engineer

  • WASHINGTON, DC
  • Posted 14 days ago | Updated moments ago

Overview

On Site
USD 100,001.00 - 125,000.00 per year
Full Time

Skills

PKI
Active Directory
Multi-factor authentication
Distributed File System
Microsoft Windows Server
IT infrastructure
Information Technology
Smart card
Identity management
Technical Support
System monitoring
System documentation
Group policy
Microsoft Operating Systems
Operating systems
VMware vSphere
Hyper-V
Security+
Computer science
Systems engineering
Security clearance
Authentication
Design
Microsoft Windows
Research
Collaboration
Microsoft
Policies
Operations
Computer hardware
Utilities
Documentation
Training
Management
ADFS
SAML
SSO
R
Scripting
Windows PowerShell
VBScript
STIG
CISA
Virtualization
Administration
Microsoft Certified Professional
ITIL
Microsoft Azure
Amazon Web Services
CyberArk
SailPoint
SAP BASIS
FOCUS

Job Details

Job ID: 2406864

Location: WASHINGTON, DC, US

Date Posted: 2024-05-14

Category: Information Technology

Subcategory: Sys Administrator

Schedule: Full-time

Shift: Day Job

Travel: No

Minimum Clearance Required: None

Clearance Level Must Be Able to Obtain: Public Trust

Potential for Remote Work: No

Description

The Senior PKI Engineer will support the upcoming Public Key Infrastructure (PKI) refresh and perform as subject matter expert for PKI, smart card authentication, and identity services for the Active Directory Services Team. The candidate will support implementation and design services for Microsoft Active Directory certificate services, identity, and access management. The candidate will provide support for Windows-based systems across the enterprise, including directory and identity management solutions. Resolves and appropriately completes assigned tasks and change requests and acts as an escalation for support issues. Applies new solutions through research and collaboration with team and determines course of action for new application initiatives. Implements new software solutions as required by the business. The core infrastructure technology duties include enterprise Microsoft Active Directory, Microsoft Certificate Services, policy configuration, and top-level support for enterprise-wide initiatives.

Job Description and Duties
  • Two-days per week onsite requirement at DOT HQ, Washington DC.
  • Once every 2-3 months support existing server infrastructure in a 24x7 on-call escalation capacity as part of a team rotation.
  • Research, evaluate, and provide solution recommendations for refresh of current PKI capability and opportunities for enhancements.
  • Support engineering, design, implementation, and operations support of PKI-solution.
  • Enterprise-level support for Active Directory for global initiatives following those through to implementation via collaboration with project and support teams.
  • Serves as escalation point for PKI and active directory support and troubleshooting, provides guidance and direction in resolution of escalated issues and/or complex production, application, or system problems.
  • Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems, and key processes, reviewing system and application logs, and verifying completion of scheduled jobs.
  • Install, configure, and maintain Active Directory and third-party software utilities for hardware systems within company operational guidelines.
  • Create and maintain system documentation for domain and PKI technologies, including installation, configuration, and appropriate troubleshooting steps.
  • Improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation.
  • Provide training as required

Required Knowledge, Skills and Abilities
  • Active Directory architecture and management [expert-level]
  • PKI, PIV cards, Smart Cards [expert-level]
  • Multi-Factor Authentication- Active Directory Federation Services (ADFS), SAML, SSO [expert-level]
  • Knowledge in creating, administering, and troubleshooting Group Policies (GPOs) [expert-level]
  • Windows Certificates Services Management [expert-level]
  • Distributed File System including both DFS-N, and DFS-R [expert-level]
  • Scripting Experience: PowerShell and VBScript [senior-level]
  • Windows Server Operating Systems (2012 R2 to 2019) [mid-level]
  • Develops security standards and controls per DISA STIGS and CISA requirements [mid-level]
  • VMware vSphere and Hyper-V Virtualization [mid-level]

Qualifications

Education and Certifications
  • Microsoft Windows Server 2016, 2019 Administration (MCSE, MCITP certification). Experience with Server 2022 is a plus.
  • Preferred Certifications: Windows Server Hybrid Administrator Associate, ITIL, Security+, Azure/AWS Solution Architect, CyberArk, SailPoint.
  • B.S. degree in a computer science, information technology, and computer related discipline or 7+ years IT work experience in a global information technology infrastructure environment



Target salary range: $100,001 - $125,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.

SAIC accepts applications on an ongoing basis and there is no deadline.

Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.


About SAIC