FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior Active Directory / Identity Engineer
DecisionPoint Corporation. Serve as the senior technical owner for the USMEPCOM Active Directory Domain Services environment .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive expertise in Active Directory Domain Services management, including installation, configuration, and troubleshooting. Proficient in identity engineering, disaster recovery planning, and maintaining security and compliance standards.
Highest-signal resume keywords
Active Directory Domain Services ManagementGroup Policy Object DevelopmentIdentity EngineeringDisaster Recovery PlanningMicrosoft Active Directory Administration
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Active Directory EngineeringWindows InfrastructureAuthentication TroubleshootingReplication ManagementSchema GovernanceBackup and Restoration ProceduresIdentity Modernization TechnologiesDirectory Permissions ManagementTechnical Documentation DevelopmentDisaster Recovery Testing
Soft Skills
Analytical Problem-SolvingStrong Written CommunicationStrong Verbal Communication
Tools & Technologies
OktaSAMLOpenID ConnectOAuthSCIMLDAPDISA STIGsRMF ControlsSYSVOLDFS Replication
Certifications & Qualifications
Active Secret ClearanceBachelor's Degree in Information Technology
Industry Keywords
Identity ManagementAccess Control PrinciplesEnterprise Identity SecurityCOOP ExercisesTechnical Standards
Tech Stack
Tools & technologiesCloudDNS
About the role
Key responsibilities & impact- Serve as the senior technical owner for the USMEPCOM Active Directory Domain Services environment
- Install, configure, maintain, update, troubleshoot, and recover Active Directory services and supporting components
- Manage AD objects, organizational units, users, computers, groups, service accounts, shared resources, and directory permissions
- Maintain domain, organizational-unit, site, trust, Group Policy, and related architecture documentation
- Develop, test, implement, maintain, and troubleshoot Group Policy Objects and related settings
- Manage trust relationships, AD sites, subnets, site links, replication schedules, and replication topology
- Maintain domain controller, directory database, SYSVOL, DFS Replication, time synchronization, and AD-integrated DNS health
- Plan and execute domain-controller installation, replacement, upgrade, demotion, and retirement
- Manage AD schema governance and evaluate schema-change requests
- Administer escalated account and group changes and troubleshoot authentication, authorization, policy, trust, replication, and directory-permission issues
- Provide advanced engineering support during identity, authentication, domain, and access-management incidents
- Develop, test, and maintain Active Directory backup, restoration, and forest-recovery procedures
- Support COOP exercises, disaster-recovery testing, recovery validation, and continuity events
- Evaluate and test approved ICAM and identity-modernization technologies, including integrations with Okta or other approved platforms
- Validate identity synchronization, account linking, authentication flows, mappings, provisioning, access controls, and failure handling
- Support testing of SAML, OpenID Connect, OAuth, SCIM, LDAP, or comparable technologies
- Automate approved directory administration, health validation, reporting, audit, and configuration activities
- Support DISA STIGs, RMF controls, assessment evidence, POA&M activities, and authorization documentation
- Maintain standard operating procedures, recovery plans, configuration baselines, change records, test results, and technical documentation
- Provide directory-service health, availability, capacity, risk, modernization, and recovery information for program reporting
Requirements
What you’ll need- Active Secret clearance or higher
- Bachelor’s degree in information technology, information systems, or a related field, or equivalent professional experience where permitted by the applicable labor category
- Minimum of eight years of relevant experience in Active Directory engineering, identity engineering, Windows infrastructure, systems engineering, or a related technical discipline
- Direct, hands-on experience engineering and administering Microsoft Active Directory Domain Services in an enterprise environment
- Experience managing AD objects, organizational units, Group Policy Objects, trusts, replication, schemas, delegated permissions, and directory recovery
- Experience troubleshooting complex authentication, authorization, Group Policy, replication, trust, and directory-services issues
- Experience planning or supporting Active Directory backup, restoration, disaster recovery, or forest recovery
- Experience testing identity integrations or evaluating enterprise identity-modernization technologies
- Understanding of the distinction between core AD DS administration and external ICAM, federation, or cloud-identity services
- Knowledge of enterprise identity security, least privilege, delegated administration, account management, and access-control principles
- Ability to develop and maintain architecture diagrams, domain plans, OU plans, Group Policy documentation, trust diagrams, recovery procedures, and technical standards
- Ability to support after-hours maintenance, COOP exercises, disaster-recovery testing, and critical incident response when required
- Strong written, verbal, analytical, and technical problem-solving skills
Benefits
Comp & perks- Regular full-time employment
- Remote work arrangement
- Chicago-area candidates preferred
- Occasional after-hours maintenance, incident response, COOP exercises, on-site support, or travel may be required