Enterprise Active Directory & Identity Engineer - TS/SCI w/Poly
About The Position
GDIT is seeking an experienced Enterprise Active Directory & Identity Engineer to engineer, troubleshoot, maintain, and modernize identity services across a large enterprise infrastructure. The position supports established on-premises Active Directory environments while advancing adoption of Microsoft Entra ID and Azure-based identity capabilities. It requires understanding how domains, forests, organizational units, Group Policy, trusts, authentication, DNS, and replication work together in a complex enterprise. This is not a routine account administration role. Active Directory is a foundational service supporting an enterprise mission across 28 IT engineering disciplines, and identity changes can affect endpoints, servers, applications, virtual environments, authentication, security controls, and enterprise connectivity. The engineer will investigate cross-technology issues, assess dependencies before implementing changes, preserve reliability and security, and help shape future enterprise identity services. The role values critical thinking, independence, continuous learning, cross-team collaboration, and work-life balance.
Requirements
- Bachelor of Arts or Bachelor of Science degree.
- At least 8 years of related experience.
- Experience engineering or supporting enterprise Microsoft Active Directory environments.
- Strong knowledge of Active Directory domains, forests, organizational units, and trust relationships.
- Practical experience designing, configuring, and troubleshooting Group Policy, including inheritance, precedence, filtering, and enforcement.
- Understanding of Active Directory replication, authentication, DNS integration, and directory services.
- Strong Windows Server and Windows operating system troubleshooting skills.
- Experience using PowerShell to manage, automate, investigate, or troubleshoot Active Directory.
- Ability to diagnose complex issues involving systems and services that depend on enterprise identity infrastructure.
- Ability to independently research technical problems, identify root causes, and develop effective solutions.
- Strong communication and cross-functional collaboration skills.
- Must currently possess and be able to obtain Top Secret SCI with Polygraph clearance.
- U.S. citizenship required.
- Must be 8570 compliant with a Security+ certification.
Nice To Haves
- Microsoft Entra ID administration or engineering.
- Hybrid identity architecture and synchronization between on-premises Active Directory and Entra ID.
- Microsoft Entra Connect or Cloud Sync.
- Azure identity and access management.
- Active Directory Federation Services (AD FS).
- Active Directory Certificate Services (AD CS) and public key infrastructure.
- DNS, DHCP, Kerberos, LDAP, and authentication troubleshooting.
- Privileged access management and enterprise identity security.
- Active Directory security assessments, hardening, and compliance.
- Advanced PowerShell automation and reporting.
- Experience supporting large, distributed, multi-domain environments.
Responsibilities
- Engineer and improve complex Active Directory environments spanning multiple domains, forests, organizational units, and interconnected systems.
- Analyze and manage Group Policy design, inheritance, precedence, filtering, enforcement, and enterprise-wide impact.
- Troubleshoot Windows authentication, domain connectivity, replication, DNS integration, policy application, and directory-related issues.
- Investigate how identity configurations affect operating systems, applications, infrastructure services, security controls, and other enterprise capabilities.
- Support domain trusts, forest relationships, cross-domain authentication, and directory dependencies.
- Help integrate and evolve traditional Active Directory services with Microsoft Entra ID and Azure identity capabilities.
- Identify configuration weaknesses, policy inconsistencies, security gaps, and opportunities to improve identity administration.
- Use PowerShell and related tools to analyze configurations, automate administrative tasks, validate policy enforcement, and improve operational efficiency.
- Collaborate with engineering teams across systems, applications, virtualization, networking, cloud, and cybersecurity.
- Independently research technical problems, identify root causes, and develop effective solutions.
- Anticipate how identity changes may affect dependent services, preserve the reliability and security of the environment, and help modernize identity capabilities.
Benefits
- Comprehensive benefits and wellness packages.
- 401(k) with company match.
- Competitive pay and paid time off.
- Medical plan options, some with Health Savings Accounts.
- Dental plan options.
- Vision plan.
- Full flex work weeks where possible.
- Vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
- Short- and long-term disability benefits.
- Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance are provided or available.
- AI-powered career tool identifying career steps and learning opportunities.
- Internal mobility team focused on helping employees achieve career goals.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
