Job Description

• Design, implement, and manage enterprise-level Active Directory (AD) infrastructure to ensure scalability, security, and optimal performance.
• Lead the planning, architecture, and deployment of AD services, including domain controllers, DNS, DHCP, and Group Policy Objects (GPOs)
• Develop and enforce AD standards, policies, and procedures to ensure compliance with organizational guidelines and industry best practices.
• Monitor and optimize AD performance through proactive tuning, troubleshooting, and capacity planning.
• Implement and manage AD security, including access controls, authentication mechanisms, and auditing, to protect sensitive data and comply with regulatory requirements.
• Plan and execute AD upgrades, patches, and migrations as necessary, ensuring minimal downtime and disruption to operations.
• Collaborate with IT teams and stakeholders to integrate AD services with other systems and applications, ensuring seamless functionality.
• Provide technical leadership and mentorship to junior engineers and support staff, fostering team skill development and knowledge sharing.
• Stay current with AD technology trends and advancements, evaluating and recommending new tools and methodologies to enhance AD management and security.
• Conduct regular AD health checks, audits, and performance assessments to maintain system reliability and availability.

• Active DoD Secret Clearance at minimum - required. Must be able to obtain a Top Secret clearance. Top Secret clearance - preferred.
• Active CompTIA Security+ required.
• Bachelors degree in Computer Science, Information Technology, or related field.
• 10+ years of experience as an Active Directory Engineer / Administrator in a large-scale enterprise environment.
• Expertise in designing, implementing, and managing complex AD infrastructures, including multi-domain and multi-site environments.
• In-depth knowledge of AD architecture, including domain services, trusts, replication, and federation services.
• Strong proficiency in AD security practices and protocols, including LDAP, Kerberos, NTLM, and integration with identity management solutions.
• Experience with AD migration tools and methodologies, including domain migrations and forest consolidations.
• Expertise in implementing and maintaining DISA Security Technical Implementation Guides (STIGs) and other security frameworks.
• Strong proficiency in virtualization technologies, including VMware, and experience managing Domain Controllers in virtualized environments.
• Ability to automate AD tasks and processes using scripting languages (e.g. PowerShell).
• Excellent analytical and problem-solving skills with attention to details.
• Effective communication skills with the ability to collaborate with cross-functional teams and stakeholders.
• Relevant certifications (e.g., Microsoft Certified: Azure Administrator Associate, MCSE: Core Infrastructure, Identity and Access Management) are a plus.