Active Directory Engineer – Journeyman

Computer World Services

. Administer, sustain, secure, troubleshoot, and recover the Microsoft Active Directory Domain Services environment supporting the USMEPCOM ENLIST program .

Posted 10/27/2026full-timeRemote • Illinois • United StatesLead💰 $130,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in Microsoft Active Directory Domain Services administration, including managing directory objects, Group Policy Objects, and disaster recovery procedures. Proficient in troubleshooting authentication and authorization issues while supporting identity integration with platforms like Okta.

Highest-signal resume keywords

Active Directory AdministrationGroup Policy Object ManagementIdentity Integration TestingDisaster Recovery ProceduresPowerShell Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Active Directory Domain ServicesGroup Policy ObjectsDirectory RecoveryAuthentication TroubleshootingAuthorization TroubleshootingReplication ManagementSchema ChangesDelegated PermissionsIdentity ProtocolsDISA STIGs Application

Soft Skills

Analytical SkillsTechnical Problem-SolvingWritten CommunicationVerbal Communication

Tools & Technologies

OktaMicrosoft Entra IDPowerShellSAMLOIDCOAuthSCIMLDAPKerberosAD FS

Certifications & Qualifications

Active Secret Clearance

Industry Keywords

Identity EngineeringWindows InfrastructureFederal Identity EnvironmentsCACPIVCertificate-Based AuthenticationPKIZero Trust PrinciplesPrivileged AccessIdentity Governance

Tech Stack

Tools & technologies

CloudCyber SecurityDNS

About the role

Key responsibilities & impact

Administer, sustain, secure, troubleshoot, and recover the Microsoft Active Directory Domain Services environment supporting the USMEPCOM ENLIST program
Manage directory objects, organizational units, Group Policy Objects, trusts, replication, schema changes, delegated permissions, domain services, and recovery capabilities
Install, configure, maintain, troubleshoot, and recover AD DS; manage users, computers, groups, service accounts, and other directory objects
Implement and maintain OU structures, permissions, and delegated administration using least-privilege principles
Develop, test, deploy, and troubleshoot GPOs and assess changes for security and customer impact
Configure and troubleshoot domain and forest trusts, AD sites, subnets, site links, replication topology, domain-controller health, SYSVOL, DFSR, time synchronization, AD-integrated DNS, and FSMO roles
Support domain-controller installation, upgrades, demotion, retirement, supported AD-version transitions, and controlled schema extensions
Process escalated account, group, and permission changes and troubleshoot authentication, authorization, policy, trust, and replication issues
Provide advanced support during identity and authentication incidents, including root-cause analysis and corrective actions
Maintain and execute AD backup, restoration, deleted-object recovery, and forest-recovery procedures; support COOP and disaster-recovery exercises
Support integration testing between AD and Okta or other approved identity platforms, including synchronization, authentication flows, mappings, provisioning, and identity protocols
Automate directory administration, health validation, and reporting; review audit information; apply DISA STIGs and security baselines; support RMF controls and remediation
Maintain SOPs, recovery plans, configuration baselines, and directory diagrams; provide health, risk, and modernization reporting
Collaborate with cybersecurity, Service Desk, systems, cloud, network, application, COOP, and Government identity stakeholders

Requirements

What you’ll need

Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category
Minimum of six (6) years of relevant experience in Active Directory administration, identity engineering, Windows infrastructure, systems engineering, or a related discipline
Direct, hands-on experience administering Microsoft AD DS in an enterprise environment, including objects, OUs, GPOs, trusts, replication, schema, delegated permissions, and directory recovery
Experience troubleshooting authentication, authorization, Group Policy, replication, and trust issues, and supporting AD backup, restoration, and disaster recovery
Experience testing identity integrations or supporting identity-modernization activities, with an understanding of the distinction between core AD DS and external ICAM, federation, or cloud-identity services
Strong written, verbal, analytical, and technical problem-solving skills
Active Secret clearance or higher is required
Preferred: Experience integrating AD with Okta, and with Microsoft Entra ID or hybrid identity
Preferred: Experience supporting federal or DoD identity environments, including CAC, PIV, certificate-based authentication, and PKI
Preferred: Experience with SAML, OIDC, OAuth, SCIM, LDAP, Kerberos, NTLM, AD FS, or comparable federation technologies
Preferred: Experience with PowerShell for AD administration and automation
Preferred: Experience applying DISA STIGs to AD and Windows infrastructure and supporting RMF authorization activities
Preferred: Familiarity with Zero Trust identity principles and privileged-access, identity-governance, or audit tools

Benefits

Comp & perks

Affirmative action and equal employment opportunity
Reasonable accommodations for individuals with disabilities
Occasional after-hours maintenance, COOP exercises, disaster-recovery testing, incident response, on-site support, or travel may be required