Senior Active Directory Engineer

Description

The Senior PKI Engineer will support the upcoming Public Key Infrastructure (PKI) refresh and perform as subject matter expert for PKI, smart card authentication, and identity services for the Active Directory Services Team.

The candidate will support implementation and design services for Microsoft Active Directory certificate services, identity, and access management.

The candidate will provide support for Windows-based systems across the enterprise, including directory and identity management solutions.

Resolves and appropriately completes assigned tasks and change requests and acts as an escalation for support issues. Applies new solutions through research and collaboration with team and determines course of action for new application initiatives.

Implements new software solutions as required by the business. The core infrastructure technology duties include enterprise Microsoft Active Directory, Microsoft Certificate Services, policy configuration, and top-level support for enterprise-wide initiatives.

Job Description and Duties

• Two-days per week onsite requirement at DOT HQ, Washington DC.
• Once every 2-3 months support existing server infrastructure in a 24x7 on-call escalation capacity as part of a team rotation.
• Research, evaluate, and provide solution recommendations for refresh of current PKI capability and opportunities for enhancements.
• Support engineering, design, implementation, and operations support of PKI-solution.
• Enterprise-level support for Active Directory for global initiatives following those through to implementation via collaboration with project and support teams.
• Serves as escalation point for PKI and active directory support and troubleshooting, provides guidance and direction in resolution of escalated issues and / or complex production, application, or system problems.
• Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems, and key processes, reviewing system and application logs, and verifying completion of scheduled jobs.
• Install, configure, and maintain Active Directory and third-party software utilities for hardware systems within company operational guidelines.
• Create and maintain system documentation for domain and PKI technologies, including installation, configuration, and appropriate troubleshooting steps.
• Improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation.
• Provide training as required

Required Knowledge, Skills and Abilities

• Active Directory architecture and management expert-level
• PKI, PIV cards, Smart Cards expert-level
• Multi-Factor Authentication- Active Directory Federation Services (ADFS), SAML, SSO expert-level
• Knowledge in creating, administering, and troubleshooting Group Policies (GPOs) expert-level
• Windows Certificates Services Management expert-level
• Distributed File System including both DFS-N, and DFS-R expert-level
• Scripting Experience : PowerShell and VBScript senior-level
• Windows Server Operating Systems (2012 R2 to 2019) mid-level
• Develops security standards and controls per DISA STIGS and CISA requirements mid-level
• VMware vSphere and Hyper-V Virtualization mid-level

Qualifications

Education and Certifications

• Microsoft Windows Server 2016, 2019 Administration (MCSE, MCITP certification). Experience with Server 2022 is a plus.
• Preferred Certifications : Windows Server Hybrid Administrator Associate, ITIL, Security+, Azure / AWS Solution Architect, CyberArk, SailPoint.
• B.S. degree in a computer science, information technology, and computer related discipline or 7+ years IT work experience in a global information technology infrastructure environment

Note : Candidate must be a U.S. citizen or green card holder who has resided in the U.S. for at least 3 years and the ability to obtain a public trust

Target salary range : $100,001 - $125,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.

SAIC accepts applications on an ongoing basis and there is no deadline.

Covid Policy : SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.