Cloud Systems Engineer – Active Directory and Windows

ECS Federal•FAIRFAX, VA

2d•Onsite

About The Position

Everforth ECS is seeking a Cloud Systems Engineer to work in its Fairfax, Virginia office and join a team managing and maintaining multiple network enclaves in support of the DoD community. The position designs, operates, and improves identity and Windows Server services in a multicloud environment spanning Microsoft Azure and Amazon Web Services (AWS). It supports cloud-hosted directory services, Windows workloads, and integrations across multiple Azure and AWS environments, with a focus on secure, reliable operations and automation. This is a demanding, high-energy role involving innovative solutions to network, hardware, and software problems. The successful candidate is a motivated self-starter who can tackle operational challenges, quickly understand and implement solutions, communicate effectively, and maintain a customer-service and career-growth orientation. The salary range is $130,000–$165,000. The posting also lists a general description of benefits but does not specify individual benefits.

Requirements

U.S. citizenship.
Active DoD Secret security clearance.
Bachelor’s degree in a related field and 5+ years of experience, or high school diploma and 9+ years of relevant experience.
Ability to obtain DoD 8140 IAT Level II Security+ certification or higher within 60 days of hire.
Experience administering Microsoft Active Directory Domain Services and Windows Server in production environments.
Experience with Microsoft Entra ID, including synchronization or identity integration concepts, single sign-on, enterprise applications, and conditional access.
PowerShell scripting experience for administration and automation.
Knowledge of DNS, Group Policy, domain controller management, directory replication, OU design, site design, authentication, and access management.
Networking knowledge relevant to cloud-hosted directory services, including VPCs or virtual networks, routing, firewalls, and name resolution.
Hands-on experience supporting Windows workloads in at least one major cloud platform: Azure or AWS.
Experience with FSLogix profile containers and troubleshooting user profile, sign-in, and session issues.
Knowledge of AVD identity, access, and networking requirements, including Microsoft Entra ID, Active Directory integration, role-based access control, and connectivity to required services.
Ability to troubleshoot identity, authentication, single sign-on, Windows operating system, and connectivity issues.
Strong communication skills and ability to work across infrastructure, security, and application teams.
Strong problem-solving and decision-making capabilities, including weighing the costs and benefits of potential actions and identifying appropriate solutions.
Highly developed interpersonal and oral and written communication skills, with the ability to interact professionally with diverse stakeholders, from peers and end-users to executive management.

Nice To Haves

Experience configuring autoscaling or host-pool scaling for Azure Virtual Desktop.

Responsibilities

Administer and maintain cloud-hosted Active Directory Domain Services and Windows Server environments in Azure and AWS.
Design and support identity integrations among Active Directory, Microsoft Entra ID, AWS services, Keycloak, and AppGate.
Manage directory objects, organizational units, Group Policy, DNS, domain controllers, trusts, and access controls.
Build, configure, patch, harden, and troubleshoot Windows Server and desktop workloads.
Implement and maintain identity lifecycle, authentication, authorization, and privileged access controls.
Monitor directory and Windows services for availability, performance, security events, and capacity.
Automate routine administration and configuration using PowerShell and infrastructure-as-code tools.
Apply security baselines, vulnerability remediation, logging, and audit requirements to Windows and directory services.
Develop backup, recovery, and business continuity procedures for directory services and Windows workloads.
Collaborate with cloud, security, and application teams to plan changes, resolve incidents, and support deployments.
Maintain technical documentation, operational procedures, diagrams, and change records.
Perform other duties as assigned.
Build, maintain, patch, and version standardized Windows operating system images for cloud deployments, including AWS AMIs and custom Azure virtual machine images.
Apply DoD Security Technical Implementation Guides (STIGs) to Windows Server images and workloads, validate compliance, remediate findings, and document approved exceptions.
Design, deploy, and maintain Azure Virtual Desktop (AVD) environments, including host pools, session hosts, application groups, workspaces, and user access.
Manage AVD session host images, including image creation, updates, patching, testing, and deployment.
Document technical procedures and participate in incident and change management.
Monitor and troubleshoot AVD performance, availability, capacity, and user experience.
Troubleshoot identity, authentication, single sign-on, Windows operating system, connectivity, and user profile issues.