Identity Infrastructure Engineer

ECS Federal•WASHINGTON, DC

2d•Hybrid

About The Position

Everforth ECS is seeking an experienced Identity Infrastructure Engineer to join its Identity Governance and Administration team. The team designs, implements, and supports the organization’s directory and identity management solutions, which underpin access, authentication, and security across the enterprise. The engineer will own the health, integrity, and security of identity infrastructure, including Microsoft Active Directory and related directory services, PKI, and certificate lifecycle operations. This hands-on senior-level role supports reliable, well-documented, and hardened infrastructure serving thousands of users and systems, and requires clear communication and collaboration across the organization.

Requirements

At least 5 years of experience administering Microsoft Active Directory and Active Directory Federation Services.
At least 5 years of experience administering enterprise Active Directory environments and supporting identity and access management solutions.
Experience performing daily system monitoring and verifying the integrity and availability of hardware, server resources, systems, and key processes.
Proficiency in reviewing system and application logs and taking appropriate corrective action.
Ability to create and maintain thorough system documentation covering installation, configuration, and troubleshooting procedures.
Experience monitoring and analyzing architecture, communications, policies, and protocols from a cybersecurity perspective.
Experience designing, implementing, and managing enterprise PKI environments, including certificate authority hierarchy management.
Proficiency in certificate lifecycle management, including issuance, renewal, revocation, and auditing.
Understanding of cryptographic standards and their application within enterprise security policy.
Ability to troubleshoot certificate-related issues across large, complex environments.
Experience integrating PKI across Active Directory, web services, and endpoint devices.
Experience with Microsoft Azure Active Directory and hybrid identity environments.
Familiarity with SSO, MFA, and enterprise identity governance platforms.
Ability to assist with security continuous monitoring, risk assessments, and system patching within identity and access management.
Ability to support large, cross-functional projects in collaboration with project and support teams.

Nice To Haves

Dedicated PKI experience alongside domain administration.

Responsibilities

Administer Microsoft Active Directory, Active Directory Federation Services, and related directory services.
Design, implement, and manage enterprise PKI environments, including certificate authority hierarchy management.
Manage certificate lifecycle operations, including issuance, renewal, revocation, and auditing.
Monitor system health and verify the integrity and availability of hardware, server resources, systems, and key processes.
Review system and application logs and take appropriate corrective action.
Create and maintain system documentation covering installation, configuration, and troubleshooting procedures.
Monitor and analyze architecture, communications, policies, and protocols from a cybersecurity perspective.
Troubleshoot certificate-related issues across large, complex environments.
Integrate PKI across Active Directory, web services, and endpoint devices.
Support hybrid identity environments and solutions involving Azure Active Directory, SSO, MFA, and identity governance platforms.
Assist with security continuous monitoring, risk assessments, and system patching in the identity and access management space.
Collaborate with project and support teams on large, cross-functional projects.