Identity Management/Active Directory Systems Administrator SME

D2 Technical Services•Alexandria, VA

1d•Onsite

About The Position

D2 is seeking an Identity Management/Active Directory Systems Administrator Subject Matter Expert (SME) to support a large enterprise IT contract for the Department of Defense. The administrator will maintain existing enterprise identity management solutions, troubleshoot incidents, and help transition new capabilities from engineering into production. Systems include Active Directory, Azure Active Directory, Azure Active Directory Connect (AADC), Active Directory Federation Services (ADFS), ADFS Web Application Proxy (WAP), Quest Active Roles Server (ARS), Microsoft Identity Manager (MIM), Forefront Identity Manager (FIM), and LDAP border directory systems such as Active Directory Lightweight Directory Services, Radiant Logic, and VDS. The role supports a large enterprise spanning multiple enclaves and sites and is 100% on-site. The administrator supports identity management operations, maintenance, implementation, and troubleshooting; investigates authentication anomalies; and coordinates with stakeholders, operations, engineering, and vendor support to resolve complex technical issues. The position includes producing follow-up reports and maintaining operational documentation for 24/7/365 IT Operations Center personnel. The employee may work independently and as part of distributed teams across multiple sites and time zones, and will mentor junior team members. Candidates must be U.S. citizens and hold an active TS/SCI clearance with CI Poly, or TS/SCI clearance and willingness to obtain a Poly. A bachelor's degree with 12 years of relevant experience, a master's degree with 10 years, an associate's degree with 14 years, or a high school diploma with 16 years is required. Candidates must meet DoDM 8140.03 (previously DoD 8570) IT System Administrator Intermediate certification requirements, with an approved certification such as Cloud+, GICSP, SSCP, Security+ CE, GSEC, or higher.

Requirements

Extensive experience with PowerShell commands and scripting or automation.
Experience with Quest ARS PowerShell extensions and implementing ARS task automation.
Experience with Tier 2/Tier 3 system administration.
Experience interacting with customers while troubleshooting incidents and system anomalies.
Experience troubleshooting issues in a growing environment.
Experience reviewing logs, analyzing incidents, and identifying issue trends.
Experience with server patch management methodologies.
Experience mentoring and training junior personnel.
Effective time management and ability to adjust priorities to customer requirements, mission needs, outage response, and support for external teams troubleshooting authentication issues.
Strong oral and written communication skills.
Ability to work effectively in a team and support peers in improving processes and results.
Ability to work independently, handle incidents as received, and complete projects assigned by program and government leadership.
Experience with IT Service Management ticketing systems such as ServiceNow.
Extensive experience with identity management technologies, including Microsoft Identity Manager (MIM), Forefront Identity Manager (FIM), Azure Active Directory Connect (AADC), Active Directory Federation Services (ADFS), ADFS Web Application Proxy (WAP), Quest Active Roles Server (ARS), LDAP border directory systems, Active Directory Lightweight Directory Services, Radiant Logic, VDS, OAUTH/SAML, and Secure Token Authentication Services/PKI integration.
U.S. citizenship.
TS/SCI with CI Poly clearance, or TS/SCI clearance and willingness to obtain a Poly.
At least one qualifying DoDM 8140.03 IT System Administrator Intermediate certification, such as Cloud+, GICSP, SSCP, Security+ CE, GSEC, or higher.
One of the specified education and experience combinations: bachelor's degree and 12 years of relevant experience; master's degree and 10 years; associate's degree and 14 years; or high school diploma and 16 years.

Nice To Haves

In-scope Counterintelligence Polygraph within the past 5 years.
Knowledge of integrating Exchange and Active Directory.
ITIL Foundations Certification.
Microsoft or other commercial identity management certifications, such as Identity and Access Administrator Associate, Azure Administrator Associate, Quest Active Roles Administration, or Quest Active Roles Implementation and Configuration.

Responsibilities

Remotely access end-user desktops and/or servers to perform technical configuration, rebooting, and other remedial actions to troubleshoot authentication anomalies.
Implement, troubleshoot, and maintain identity management systems.
Distinguish isolated user problems from enterprise-wide application or system problems and recommend solutions.
Coordinate with stakeholders to collect data, conduct analysis, and develop and implement solutions for incident tickets and requirements.
Build and deploy Domain Controllers and other identity management servers remotely at customer sites using approved installation procedures.
Provide follow-up reports documenting technical findings, feedback, and resolution steps for root cause analysis, engineering technical assessment, and process improvement initiatives.
Mentor junior team members.
Update operations and maintenance documentation for 24/7/365 IT Operations Center personnel.
Support operations across multiple geographic locations and network classifications.
Work with Operations, Engineering, and vendor support to develop solutions to complex technical issues.
Work independently and collaboratively with teams located at multiple sites and time zones.