Identity Infrastructure Engineer

ECS Tech Inc•Washington, DC

2d•$120,000 - $130,000•Hybrid

About The Position

Everforth ECS is seeking an Identity Infrastructure Engineer to join our Identity Governance and Administration (IG&A) team. This team oversees the design, implementation, and ongoing support of the organization's directory and identity management solutions, which is the foundational layer that underpins access, authentication, and security across the entire enterprise. In this role, you will own the health, integrity, and security of the organization's identity infrastructure. This involves administering Microsoft Active Directory and related directory services, managing PKI and certificate lifecycle operations, and ensuring the identity backbone supporting thousands of users and systems is reliable, well-documented, and hardened against threats. This is a hands-on senior-level role for someone who takes pride in keeping complex infrastructure running cleanly, communicates clearly with teams across the organization, and understands that identity is not just a technical function but a critical security control.

Requirements

Minimum of 5+ years of experience administering Microsoft Active Directory and Active Directory Federation Services
Experience performing daily system monitoring, verifying the integrity and availability of hardware, server resources, systems, and key processes
Proficiency in reviewing system and application logs and taking appropriate corrective action
Ability to create and maintain thorough system documentation covering installation, configuration, and troubleshooting procedures
Experience monitoring and analyzing architecture, communication, policies, and protocols from a cybersecurity perspective
Experience designing, implementing, and managing enterprise PKI environments, including certificate authority (CA) hierarchy management
Proficiency in certificate lifecycle management — issuance, renewal, revocation, and auditing
Understanding of cryptographic standards and their application within enterprise security policy
Ability to troubleshoot certificate-related issues across large, complex environments
Experience integrating PKI across Active Directory, web services, and endpoint devices
Experience with Microsoft Azure Active Directory and hybrid identity environments
Familiarity with Single Sign-On (SSO), Multi-Factor Authentication (MFA), and enterprise identity governance platforms
Ability to assist with security continuous monitoring, including risk assessments and system patching, within the identity and access management space
Experience supporting large, cross-functional projects through collaboration with project and support teams
A minimum of 5+ years of experience administering enterprise Active Directory environments and supporting identity and access management solutions is required.

Nice To Haves

Candidates who bring dedicated PKI experience alongside domain administration will be strongly preferred.

Responsibilities

Administering Microsoft Active Directory and related directory services
Managing PKI and certificate lifecycle operations
Ensuring the identity backbone supporting thousands of users and systems is reliable, well-documented, and hardened against threats
Performing daily system monitoring, verifying the integrity and availability of hardware, server resources, systems, and key processes
Reviewing system and application logs and taking appropriate corrective action
Monitoring and analyzing architecture, communication, policies, and protocols from a cybersecurity perspective
Designing, implementing, and managing enterprise PKI environments, including certificate authority (CA) hierarchy management
Managing certificate lifecycle management — issuance, renewal, revocation, and auditing
Troubleshooting certificate-related issues across large, complex environments
Integrating PKI across Active Directory, web services, and endpoint devices
Assisting with security continuous monitoring, including risk assessments and system patching, within the identity and access management space
Supporting large, cross-functional projects through collaboration with project and support teams