Active Directory Operations Engineer

Description

This position is in support of the Department of State (DoS) as a part of the Vanguard 2.2.1 contract.

The candidate will be responsible to support the on-premise and cloud based authentication applications and other services securing the DoS IT infrastructure. Experience with Azure Connect Health and configuring Conditional Access Policies to meet the system owner's business requirements are preferred.

This role requires an in-depth knowledge of the Active Directory, DNS, Azure Monitor (SCOM), MECM (SCCM), group policy and a proficiency in PowerShell scripting. The candidate must have demonstrated prior and active experience in managing Active Directory including diagnosing complex replication, group policy, and multi domain issues. The candidate will support the continuing goal of incorporating these innovative technologies into the Department's equipment modernization program. The successful candidate will be a self-starter, someone who can work independently, and will be flexible in a fast-paced environment.

Shift/Schedule Info:

• The role allows for 1 day/week of telework. Subject to change based on customer requirements.
• Monday-Friday
• One of the following shifts will be assigned:
  • 7:00am-3:00pm
  • 3:00pm-11:00pm

Description of Duties:

• Active Directory liaison with the other project teams.
• Participate with the engineering groups to implement and support a new directory related services.
• Lead and Participate in Technical meetings.
• Ensure Line and services manager is made aware of potential system problems or customer issues to avoid surprising management personnel.
• Create AD test plans, technical specifications, work instructions, and white papers as required.
• Communicate regularly to Government leads regarding project activities and status.
• Onboard the application in Azure AD.
• Help application owners to create service principal name (SPN) if it is not already configured.
• Create Kerberos Constrain Delegation (KCD) for single sign-on (SSO).
• Replicate the changes to three (3) Active Directory core site.
• Configure, manage, add, delete, change user/groups/computers in Azure AD and AD.
• Create DNS records.

Qualifications

Required Education and Experience:

• Bachelor's degree with 5+ year's recent system engineering experience; Masters degree and 3+ years; Additional training and experience may be substituted in lieu of a degree.
• Experience with Windows Administration and Active Directory support.
• Proficiency authoring PowerShell scripts for task automation.
• A Strong understanding of DNS Management.
• Strong understanding and practical experience using of Group Policy for server management.
• Foundational to advance proficiency with Azure Monitor (SCOM) and Microsoft Endpoint Manager (MECM/SCCM).

Required Clearance:

• US Citizenship.
• Ability to obtain Top Secret clearance.
• Interim top secret clearance will be required before starting work.

SAIC accepts applications on an ongoing basis and there is no deadline.

Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.