Identity Management/Active Directory SME

Leidos•Alexandria, VA

5d•$116,350 - $210,325

About The Position

Leidos is seeking an Identity Management/Active Directory Subject Matter Expert to support a large enterprise IT contract for the Department of Defense. The role maintains existing enterprise identity management solutions, troubleshoots incidents, and helps transition new capabilities from engineering into production. It validates the health, status, operations, and maintenance of identity systems including Active Directory, Azure Active Directory, Azure Active Directory Connect, Active Directory Federation Services and Web Application Proxy, Quest Active Roles Server, Microsoft Identity Manager, Forefront Identity Manager, and LDAP border directory systems such as Active Directory Lightweight Directory Services and Radiant Logic VDS. The position works as part of a team supporting a large enterprise across multiple enclaves, sites, geographic locations, and network classifications. Work may involve remotely accessing end-user desktops or servers to configure systems, reboot devices, and perform other troubleshooting actions. The SME works with Operations, Engineering, stakeholders, and vendor support to resolve complex technical issues, while also mentoring junior team members and updating operational documentation for 24/7/365 IT Operations Center personnel. Candidates must meet the specified education-and-experience combination, hold at least one qualifying DoD IT System Administrator Intermediate certification, and be U.S. citizens. The position requires TS/SCI with a specific polygraph, or TS/SCI and willingness to obtain a polygraph. The listed pay range is $116,350 to $210,325.

Requirements

Bachelor's degree and 12 years of relevant experience, or a master's degree and 10 years, or an associate's degree and 14 years, or a high school diploma and 16 years.
At least one DoDM 8140.03 (previously DoD 8570) IT System Administrator Intermediate certification: Cloud+, GICSP, SSCP, Security+ CE, GSEC, or higher.
U.S. citizenship.
TS/SCI clearance with a specific polygraph, or TS/SCI clearance and willingness to obtain a polygraph.
Extensive experience with PowerShell commands and scripting or automation.
Experience with Quest ARS PowerShell extensions and implementing ARS task automation.
Experience with Tier 2/Tier 3 system administration.
Experience interacting with customers while troubleshooting incidents and system anomalies.
Experience troubleshooting issues in a growing environment.
Experience with log reviews, incident analysis, and identifying issue trends.
Experience with server patch management methodologies.
Experience mentoring and training junior personnel.
Effective time management and ability to adjust priorities to changing customer requirements, mission needs, outage response, and support for external teams troubleshooting authentication issues.
Strong oral and written communication skills.
Ability to work effectively in a team and support peers in improving processes and results.
Ability to work independently, handle incidents as received, and complete projects assigned by program and government leadership.
Extensive experience with identity management technologies, including Microsoft Identity Manager, Forefront Identity Manager, Azure Active Directory Connect, Active Directory Federation Services, ADFS Web Application Proxy, Quest Active Roles Server, LDAP border directory systems, Active Directory Lightweight Directory Services, Radiant Logic VDS, OAuth/SAML, and secure token authentication services/PKI integration.

Nice To Haves

Knowledge of integrating Exchange and Active Directory.
ITIL Foundations certification.
Microsoft or other commercial identity management certifications, such as Identity and Access Administrator Associate, Azure Administrator Associate, Quest Active Roles Administration, or Quest Active Roles Implementation and Configuration.

Responsibilities

Maintain existing enterprise identity management solutions, troubleshoot incidents, and assist with transitioning new capabilities from engineering to production.
Validate the health, status, operation, and maintenance of identity management systems.
Provide support for implementing, troubleshooting, and maintaining identity management systems.
Remotely access user endpoints, including desktops and servers, to perform technical configuration, rebooting, and other remedial actions for authentication troubleshooting.
Distinguish isolated user problems from enterprise-wide application or system problems and recommend solutions.
Coordinate with stakeholders to collect data, conduct analysis, and develop and implement solutions for incident tickets and requirements.
Build and deploy domain controllers and other identity management servers remotely at customer sites using approved installation procedures.
Provide follow-up reports documenting technical findings, feedback, and resolution steps for root-cause analysis, engineering assessment, and process improvement.
Mentor junior team members.
Update operations and maintenance documentation for 24/7/365 IT Operations Center personnel.
Support operations across multiple geographic locations and network classifications.
Work with Operations, Engineering, and vendor support to develop solutions to complex technical issues.
Work independently and collaboratively with teams at multiple sites and time zones.
Apply server patch management methodologies, review logs, analyze incidents, and identify issue trends.
Use IT service management ticketing systems such as ServiceNow.
Work incidents as received and complete projects assigned by program and government leadership.