Identity Infrastructure Engineer

ECS Tech Inc•Washington, DC

3d•$120,000 - $130,000•Hybrid

About The Position

Everforth ECS is seeking an experienced Identity Infrastructure Engineer to join its Identity Governance and Administration (IG&A) team in the Washington, DC office in a hybrid role. The team oversees the design, implementation, and ongoing support of directory and identity management solutions that underpin enterprise access, authentication, and security. The engineer will own the health, integrity, and security of the organization’s identity infrastructure. This includes administering Microsoft Active Directory and related directory services, managing PKI and certificate lifecycle operations, and maintaining a reliable, well-documented identity infrastructure that supports thousands of users and systems and is hardened against threats. This is a hands-on senior-level role requiring clear communication with teams across the organization and an understanding of identity as a critical security control.

Requirements

At least 5 years of experience administering Microsoft Active Directory and Active Directory Federation Services.
At least 5 years of experience administering enterprise Active Directory environments and supporting identity and access management solutions.
Experience designing, implementing, and managing enterprise PKI environments, including certificate authority hierarchy management.
Proficiency in certificate lifecycle management, including issuance, renewal, revocation, and auditing.
Understanding of cryptographic standards and their application within enterprise security policy.
Ability to troubleshoot certificate-related issues across large, complex environments.
Experience with Microsoft Azure Active Directory and hybrid identity environments.
Familiarity with Single Sign-On (SSO), Multi-Factor Authentication (MFA), and enterprise identity governance platforms.
Ability to perform system monitoring, review logs, take corrective action, and maintain thorough system documentation.
Ability to communicate clearly and collaborate with teams across the organization.

Nice To Haves

Dedicated PKI experience alongside domain administration is strongly preferred.

Responsibilities

Administer Microsoft Active Directory, Active Directory Federation Services, and related directory services.
Design, implement, and manage enterprise PKI environments, including certificate authority hierarchy management.
Manage certificate lifecycle operations, including issuance, renewal, revocation, and auditing.
Monitor systems and verify the integrity and availability of hardware, server resources, systems, and key processes.
Review system and application logs and take appropriate corrective action.
Create and maintain documentation covering installation, configuration, and troubleshooting procedures.
Monitor and analyze architecture, communications, policies, and protocols from a cybersecurity perspective.
Integrate PKI across Active Directory, web services, and endpoint devices.
Support security continuous monitoring, risk assessments, and system patching in the identity and access management space.
Collaborate with project and support teams on large, cross-functional projects.