Senior Active Directory / Identity Engineer

Computer World Services

. Serve as senior technical owner for the USMEPCOM AD DS environment, maintaining domain, OU, site, trust, and Group Policy plans and architecture documentation .

Posted 10/27/2026full-timeRemote • Illinois • United StatesSenior💰 $135,000 - $175,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Active Directory Domain Services (AD DS) management, including engineering, administration, and troubleshooting of directory objects, Group Policy Objects (GPOs), and trust relationships. Proficient in implementing security measures, disaster recovery procedures, and identity integration with external platforms.

Highest-signal resume keywords

Active Directory EngineeringGroup Policy AdministrationIdentity Integration TestingDisaster Recovery PlanningMicrosoft AD DS Troubleshooting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Active Directory Domain ServicesGroup Policy ObjectsTrust RelationshipsDirectory RecoveryAuthentication TroubleshootingReplication ManagementSchema ManagementWindows InfrastructureIdentity ModernizationAutomation of Directory Administration

Soft Skills

Analytical Problem-SolvingStrong Written CommunicationStrong Verbal Communication

Tools & Technologies

OktaSAMLOIDCOAuthSCIMLDAPDISA STIGsRMF Controls

Certifications & Qualifications

Active Secret Clearance

Industry Keywords

Identity EngineeringSystems EngineeringEnterprise EnvironmentCOOP ExercisesDisaster Recovery Testing

Tech Stack

Tools & technologies

CloudCyber SecurityDNS

About the role

Key responsibilities & impact

Serve as senior technical owner for the USMEPCOM AD DS environment, maintaining domain, OU, site, trust, and Group Policy plans and architecture documentation
Install, configure, maintain, troubleshoot, and recover AD DS; administer users, computers, groups, service accounts, and directory objects
Design and maintain OU structures; manage permissions and delegated administration using least-privilege principles
Develop, test, deploy, and troubleshoot GPOs, including links, inheritance, precedence, security filtering, WMI filters, backups, and recovery
Configure, validate, and troubleshoot domain and forest trusts
Maintain AD sites, subnets, site links, replication topology, domain-controller health, SYSVOL, DFSR, time synchronization, AD-integrated DNS, and FSMO roles
Plan and execute domain-controller installation, upgrade, demotion, retirement, and supported AD-version transitions; coordinate schema extensions
Process escalated account, group, and permission changes; troubleshoot authentication, authorization, policy, trust, and replication issues
Provide advanced support during identity and authentication incidents; support root-cause analysis and corrective actions
Develop, maintain, and test AD backup, restoration, deleted-object recovery, and forest-recovery procedures; support COOP and disaster-recovery exercises
Support AD integration testing with Okta or other approved identity platforms, including synchronization, authentication flows, mappings, provisioning, and SAML, OIDC, OAuth, SCIM, or LDAP protocols
Automate directory administration, health validation, and reporting; review audit information; apply DISA STIGs and security baselines; support RMF controls, POA&M activities, and remediation
Maintain SOPs, recovery plans, configuration baselines, and directory diagrams; provide directory-service health, risk, and modernization information for program reporting
Work closely with cybersecurity, Service Desk, systems, cloud, network, application, COOP, and Government identity stakeholders

Requirements

What you’ll need

Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category
Minimum of eight (8) years of relevant experience in Active Directory engineering, identity engineering, Windows infrastructure, systems engineering, or a related discipline
Direct, hands-on experience engineering and administering Microsoft AD DS in an enterprise environment, including objects, OUs, GPOs, trusts, replication, schema, delegated permissions, and directory recovery
Experience troubleshooting complex authentication, authorization, Group Policy, replication, and trust issues, and planning or supporting AD backup, restoration, and forest recovery
Experience testing identity integrations or supporting identity-modernization activities, with an understanding of the distinction between core AD DS and external ICAM, federation, or cloud-identity services
Strong written, verbal, analytical, and technical problem-solving skills
Active Secret clearance or higher is required
Chicago, IL–area candidates preferred
Occasional after-hours maintenance, COOP exercises, disaster-recovery testing, incident response, on-site support, or travel may be required

Benefits

Comp & perks

Reasonable accommodations for individuals with disabilities during application, interview, job performance, and employment benefits processes
Remote work arrangement
Occasional after-hours maintenance, COOP exercises, disaster-recovery testing, incident response, on-site support, or travel opportunities/requirements