Sr. Active Directory/Group Policy System Administrator

Description

The Leidos DES (Defense Enclave Services) team is supporting an extensive digital modernization program critical to DISA and Fourth Estate Agencies and is currently seeking a Sr. Active Directory/Group Policy System Engineer supporting our customer at Ft. Meade, MD.

POSITION SUMMARY:
The Senior Active Directory Engineer provides support, implementation, and design services for Microsoft Active Directory and Windows-based systems across the enterprise, including directory and identity management solutions. Resolves and appropriately completes assigned tasks and change requests and acts as an escalation for support issues. Applies new solutions through research and collaboration with team and determines course of action for new application initiatives. Implements new software solutions as required by the business. The core infrastructure technology duties include enterprise Microsoft Active Directory, ADFS, Microsoft Certificate Services, Azure Authentication, policy configuration, and top-level support for enterprise-wide initiatives.

CLEARANCE REQUIREMENT:
•Must hold an active Secret clearance and be able to obtain and maintain a Top Secret. (US Citizenship required)

PRIMARY RESPONSIBILITIES:
•Active Directory architecture and management [expert-level].
•Enterprise-level support for Active Directory for global initiatives following those through to implementation via collaboration with project and support teams.
•Identify opportunities to innovate, extend and enhance service delivery everywhere possible.
•Perform Root Cause Analysis and Problem Management for directory services environment.
•Serves as escalation point for application support and troubleshooting, provides guidance and direction in resolution of escalated issues and/or complex production, application, or system problems.
•Install, configure, and maintain Active Directory and third-party software utilities for hardware systems within operational guidelines.
•Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate troubleshooting steps.
•Improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation.
•Expert knowledge in creating, administering, and troubleshooting Group Policies (GPOs) [expert-level].
•Active Directory Federation Services (ADFS), SAML, SSO [expert-level].
•Windows Certificates Services Management [expert-level].
•Distributed File System including both DFS-N, and DFS-R [expert-level] .
•Windows Server Operating Systems (2012 R2 to 2022) [mid-level] .
•Azure Active Directory and Azure AD Connect [mid-level] .
•Azure AD Single Sign-on (SSO) federated authentication and enterprise application [mid-level].
•Develops security standards and controls per DISA STIGS and CISA requirements [mid-level].
•VMware vSphere and Hyper-V Virtualization [mid-level].
•Scripting Experience: PowerShell and VBScript [mid-level].
•Windows Failover Clustering [mid-level].
•Windows file shares and security administration [mid-level].
•Windows Failover Clustering [mid-level].
•Design, plan, implement and manage Organizational Units (OUs).
•Plan, manage and perform Group Policy optimization, security, etc.
•Provide on call support to the current operations team when troubleshooting/resolving incidents with enterprise systems.
•Prepare recommendations for resolutions to NetOps challenges based on monitoring results, tools analysis, and/or forensics.
•Attend meetings weekly and provide weekly status reports.
•Provide training as required.

BASIC QUALIFICATIONS:
•Bachelor’s degree in a computer science, information technology, and computer related discipline and 12+ years of relevant experience; additional years of experience may be substituted in lieu of a degree.
•Must have a DoD IAT Level II certification (Sec+), or higher, prior to start.
•Trouble reporting and tracking systems such as ITSM+ experience.
•Must be able to lift/move/carry equipment when necessary (max 40 pounds).
•Seven (7) years of progressive experience in Microsoft Windows Server 2016 or newer administration, Microsoft Active Directory 2016 or newer administration experience.
•Microsoft Windows Server 2016, 2019, or 2022 Administration (MCSE, MCITP certification)
•Must have flexible working hours to be available to support team when needed to include occasional on call support or additional hours based on mission need.

DISADES

External Referral Eligible

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.