Systems Engineer/Administrator - Windows

General Dynamics Information Technology

2d•$107,950 - $146,050•Onsite

About The Position

Join GDIT as a Systems Engineer/Administrator Senior and build an impactful career in enterprise IT, collaborating with people who are driven and resourceful like you. The work you’ll do at GDIT will be impactful to the mission of USAREUR-AF G6. This role is responsible for the engineering, maintenance, and modernization of identity, credential, and access management (ICAM) infrastructure across hybrid environments. You will focus on safeguarding and enabling access to business critical Headquarters applications, integrating legacy authentication systems with enterprise-level solutions, and advancing automation through Infrastructure as Code (IaC) and DevSecOps practices. The ideal candidate brings deep Windows Server and Active Directory expertise, hands-on experience with AD FS and Azure DevOps, and a strong commitment to secure, reliable, and automated solutions that support the DoWIN environment.

Requirements

Bachelor of Arts/Bachelor of Science
5+ years of related experience
U.S. SECRET security clearance with the ability to obtain TS/SCI
US citizenship required
Meets DoD 8140 System Administrator Intermediate or Advanced certification requirements
ITIL Foundation Certification
Windows Server Hybrid Administrator Associate, or DevOps Engineer Expert Microsoft certification (or higher)
Demonstrated experience with Windows Server administration in an enterprise or DoW environment
Demonstrated experience with AD FS – configuration, operations, and troubleshooting
Demonstrated experience with AD DS – accounts, groups, OU structure, GPO application, and delegation
Demonstrated experience with Azure DevOps – repositories, pipelines, and agents
Demonstrated experience applying and interpreting STIGs for Windows Server and related technologies
Strong PowerShell scripting skills for automation, configuration, and administration tasks

Nice To Haves

Experience with eMASS and the RMF processes
Hands-on experience with DSC and/or similar configuration management frameworks
Experience using Evaluate-STIG
Strong Group Policy design and troubleshooting skills in complex AD environments
Experience with containerization and orchestration
One or more current cloud certifications

Responsibilities

Administer and optimize AD FS and ICAM services
Administer multiple Active Directory Federation Services (AD FS) environments that support authentication and authorization for users accessing applications via the DoWIN
Monitor, troubleshoot, and optimize federation services to ensure secure, highly available access to mission-critical applications
Coordinate changes and updates with other identity and directory teams across the enterprise
Engineer integration solutions with enterprise ICAM providers
Design and implement solutions to integrate existing and new applications with DoW-wide ICAM providers
Develop technical designs, configuration standards, and documentation for application onboarding to centralized authentication and authorization services
Collaborate with application owners and security stakeholders to ensure compliance with relevant DoW and USAREUR-AF policies
Manage on-premises DevSecOps platform
Administer an on-premises DevSecOps platform, including creation of new repositories, pipeline configuration, and agent deployment/management
Partner with development and operations teams to streamline CI/CD workflows, improve build and release reliability, and increase automation coverage
Implement and maintain controls that support secure code management, branching strategies, and auditability
Design and implement Infrastructure as Code (IaC) solutions
Design IaC solutions using tools such as Microsoft Desired State Configuration (DSC) or similar tools to standardize system configurations and automate system deployments
Develop, test, and document reusable configuration templates and automation artifacts for Windows-based infrastructure and applications
Continuously improve deployment reliability, configuration consistency, and time-to-delivery through automation
Deploy and maintain lab environments for research and testing
Build and maintain lab environments used by development and operations teams for research, prototyping, and pre-production testing
Coordinate refreshes, reconfigurations, and proof-of-concept efforts in support of modernization and migration activities
Support core Windows infrastructure operations
Assist with Active Directory Domain Services (AD DS), Group Policy, and IIS web server operations as part of the broader operations team
Contribute to patching, STIG hardening, security remediation, and performance tuning tasks for Windows Server platforms
Participate in on-call or after-hours support rotations, as required by the mission

Benefits

Variety of medical plan options, some with Health Savings Accounts
Dental plan options
Vision plan
401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match
Full flex work weeks where possible
Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave
Short and long-term disability benefits
Life insurance
Accidental death and dismemberment insurance
Personal accident insurance
Critical illness insurance
Business travel and accident insurance