Top Secret Systems Engineer

TEKsystems•Richardson, TX

1d•$60 - $65•Onsite

About The Position

This position requires an active DoD Clearance (Top Secret, Top Secret/SCI). Because an active clearance is required, U.S. Citizenship is required. The role involves designing, configuring, and maintaining Group Policy Objects (GPOs) across Active Directory environments, managing identity lifecycle workflows, executing user onboarding processes, and performing ongoing operational maintenance of Active Directory infrastructure. The engineer will support the enforcement of least-privilege access principles, assist with trust configuration and ADFS operations, troubleshoot Active Directory and identity-related issues, support ATO documentation and RMF activities, and maintain accurate technical documentation.

Requirements

5–7+ years of hands-on experience in systems engineering or systems administration with a focus on Active Directory and identity management
Solid working knowledge of Group Policy configuration, management, and troubleshooting in enterprise environments
Experience managing identity lifecycle workflows including user provisioning and deprovisioning processes
Familiarity with RBAC frameworks, delegation models, and least-privilege access principles
Working knowledge of Active Directory operational health including replication, DNS, and domain controller management
Familiarity with DISA STIGs and their application to directory services and identity infrastructure
Active Top Secret security clearance required; TS/SCI eligibility preferred
U.S. Citizenship is required

Nice To Haves

Microsoft certifications (MCSA, MCSE, or equivalent) a plus
Prior experience in a DoD, IC, or cleared defense contractor environment
Familiarity with ADFS, SSO federation, and identity provider operations
Working knowledge of RMF, NIST 800-53, and the ATO process
Experience with PowerShell scripting for Active Directory automation and reporting
Familiarity with PKI infrastructure and certificate services in a DoD environment
Bachelor's degree in Information Technology, Computer Science, Systems Engineering, or a related field; equivalent experience considered
DoD 8570/8140 IAT Level II certification (Security+, or equivalent)

Responsibilities

Design, configure, and maintain Group Policy Objects (GPOs) across Active Directory environments in alignment with DISA STIG requirements and organizational security policies
Manage identity lifecycle workflows including user provisioning, modification, and deprovisioning across classified and unclassified systems
Execute user onboarding processes, including account creation, role assignment, access provisioning, and documentation in accordance with RBAC frameworks
Perform ongoing operational maintenance of Active Directory infrastructure including replication monitoring, DNS health, domain controller management, and schema updates
Support the enforcement of least-privilege access principles through regular access reviews and role-based permission audits
Assist senior engineers with trust configuration, ADFS operations, and identity federation maintenance tasks
Troubleshoot and resolve Active Directory, GPO, and identity-related issues in a timely manner
Support ATO documentation, RMF activities, and continuous monitoring efforts in coordination with the cybersecurity team
Maintain accurate technical documentation including GPO inventories, identity workflow diagrams, and operational runbooks