Top Secret Systems Engineer

TEKsystems•Richardson, TX

1d•$60 - $65•Remote

About The Position

This role focuses on designing, configuring, and maintaining Group Policy Objects (GPOs) within Active Directory environments, ensuring alignment with DISA STIG requirements and organizational security policies. The position involves managing the complete identity lifecycle, from user provisioning to deprovisioning, across both classified and unclassified systems. Key responsibilities include executing user onboarding processes, performing ongoing operational maintenance of Active Directory infrastructure, and supporting the enforcement of least-privilege access principles. The engineer will also assist with trust configuration, ADFS operations, and identity federation, troubleshoot Active Directory and identity-related issues, and support ATO documentation and RMF activities. Maintaining accurate technical documentation is also a critical part of the role.

Requirements

5–7+ years of hands-on experience in systems engineering or systems administration with a focus on Active Directory and identity management
Solid working knowledge of Group Policy configuration, management, and troubleshooting in enterprise environments
Experience managing identity lifecycle workflows including user provisioning and deprovisioning processes
Familiarity with RBAC frameworks, delegation models, and least-privilege access principles
Working knowledge of Active Directory operational health including replication, DNS, and domain controller management
Familiarity with DISA STIGs and their application to directory services and identity infrastructure
Active Top Secret security clearance required; TS/SCI eligibility preferred

Nice To Haves

Prior experience in a DoD, IC, or cleared defense contractor environment
Familiarity with ADFS, SSO federation, and identity provider operations
Working knowledge of RMF, NIST 800-53, and the ATO process
Experience with PowerShell scripting for Active Directory automation and reporting
Familiarity with PKI infrastructure and certificate services in a DoD environment
Bachelor's degree in Information Technology, Computer Science, Systems Engineering, or a related field; equivalent experience considered
DoD 8570/8140 IAT Level II certification (Security+, or equivalent)
Microsoft certifications (MCSA, MCSE, or equivalent) a plus

Responsibilities

Design, configure, and maintain Group Policy Objects (GPOs) across Active Directory environments in alignment with DISA STIG requirements and organizational security policies
Manage identity lifecycle workflows including user provisioning, modification, and deprovisioning across classified and unclassified systems
Execute user onboarding processes, including account creation, role assignment, access provisioning, and documentation in accordance with RBAC frameworks
Perform ongoing operational maintenance of Active Directory infrastructure including replication monitoring, DNS health, domain controller management, and schema updates
Support the enforcement of least-privilege access principles through regular access reviews and role-based permission audits
Assist senior engineers with trust configuration, ADFS operations, and identity federation maintenance tasks
Troubleshoot and resolve Active Directory, GPO, and identity-related issues in a timely manner
Support ATO documentation, RMF activities, and continuous monitoring efforts in coordination with the cybersecurity team
Maintain accurate technical documentation including GPO inventories, identity workflow diagrams, and operational runbooks