Top Secret Systems Engineer

TEKsystems•Richardson, TX

1d•$60 - $65•Remote

About The Position

This is a Contract position based out of Richardson, TX. The role involves designing, configuring, and maintaining Group Policy Objects (GPOs) across Active Directory environments, managing identity lifecycle workflows, executing user onboarding processes, and performing operational maintenance of Active Directory infrastructure. The position also supports ATO documentation, RMF activities, and continuous monitoring efforts, while maintaining accurate technical documentation.

Requirements

5–7+ years of hands-on experience in systems engineering or systems administration with a focus on Active Directory and identity management
Solid working knowledge of Group Policy configuration, management, and troubleshooting in enterprise environments
Experience managing identity lifecycle workflows including user provisioning and deprovisioning processes
Familiarity with RBAC frameworks, delegation models, and least-privilege access principles
Working knowledge of Active Directory operational health including replication, DNS, and domain controller management
Familiarity with DISA STIGs and their application to directory services and identity infrastructure
Active Top Secret security clearance required; TS/SCI eligibility preferred
CompTIA Security+

Nice To Haves

Prior experience in a DoD, IC, or cleared defense contractor environment
Familiarity with ADFS, SSO federation, and identity provider operations
Working knowledge of RMF, NIST 800-53, and the ATO process
Experience with PowerShell scripting for Active Directory automation and reporting
Familiarity with PKI infrastructure and certificate services in a DoD environment
Bachelor's degree in Information Technology, Computer Science, Systems Engineering, or a related field; equivalent experience considered
Microsoft certifications (MCSA, MCSE, or equivalent) a plus
DoD 8570/8140 IAT Level II certification (Security+, or equivalent)

Responsibilities

Design, configure, and maintain Group Policy Objects (GPOs) across Active Directory environments in alignment with DISA STIG requirements and organizational security policies
Manage identity lifecycle workflows including user provisioning, modification, and deprovisioning across classified and unclassified systems
Execute user onboarding processes, including account creation, role assignment, access provisioning, and documentation in accordance with RBAC frameworks
Perform ongoing operational maintenance of Active Directory infrastructure including replication monitoring, DNS health, domain controller management, and schema updates
Support the enforcement of least-privilege access principles through regular access reviews and role-based permission audits
Assist engineers with trust configuration, ADFS operations, and identity federation maintenance tasks
Troubleshoot and resolve Active Directory, GPO, and identity-related issues in a timely manner
Support ATO documentation, RMF activities, and continuous monitoring efforts in coordination with the cybersecurity team
Maintain accurate technical documentation including GPO inventories, identity workflow diagrams, and operational runbooks