Active Directory Engineer

TEK Systems; Dallas (TX); On-site; USD 83,000 - 90,000; Full time

Benefits offered by this job

Medical, dental & vision

401(k) Retirement Plan

Job summary

TEKsystems seeks an experienced Systems Engineer specializing in Active Directory to design, configure, and maintain Group Policy Objects across enterprise environments in line with DISA STIGs and security policies.

You will manage identity lifecycles, onboarding workflows, RBAC-based access, and perform routine AD health tasks with a focus on least-privilege access. This contract role is onsite in Dallas, TX, with TS/SCI considerations and DoD-style environments.

Qualifications

• 5–7+ years of hands-on experience in systems engineering or systems administration with a focus on Active Directory and identity management.
• Solid working knowledge of Group Policy configuration, management, and troubleshooting in enterprise environments.
• Experience managing identity lifecycle workflows including user provisioning and deprovisioning processes.
• Familiarity with RBAC frameworks, delegation models, and least-privilege access principles.

Responsibilities

• Design, configure, and maintain GPOs across Active Directory environments in alignment with DISA STIG requirements.
• Manage identity lifecycle workflows including user provisioning, modification, and deprovisioning across classified and unclassified systems.
• Support ATO documentation, RMF activities, and continuous monitoring in coordination with cybersecurity teams.

Skills

Active Directory

Group Policy

Education

Bachelor's degree in Information Technology/Computer Science/Systems Engineering

DoD 8570/8140 IAT Level II certification (Security+)

Tools

PowerShell scripting

Job description

Description

What You'll Do-Design, configure, and maintain Group Policy Objects (GPOs) across Active Directory environments in alignment with DISA STIG requirements and organizational security policies-Manage identity lifecycle workflows including user provisioning, modification, and deprovisioning across classified and unclassified systems-Execute user onboarding processes, including account creation, role assignment, access provisioning, and documentation in accordance with RBAC frameworks-Perform ongoing operational maintenance of Active Distribution infrastructure including replication monitoring, DNS health, domain controller management, and schema updates-Support the enforcement of least-privilege access principles through regular access reviews and role-based permission audits-Assist senior engineers with trust configuration, ADFS operations, and identity federation maintenance tasks-Troubleshoot and resolve Active Directory, GPO, and identity-related issues in a timely manner-Support ATO documentation, RMF activities, and continuous monitoring efforts in coordination with the cybersecurity team-Maintain accurate technical documentation including GPO inventories, identity workflow diagrams, and operational runbooksWhat You Bring-5–7+ years of hands-on experience in systems engineering or systems administration with a focus on Active Directory and identity management-Solid working knowledge of Group Policy configuration, management, and troubleshooting in enterprise environments-Experience managing identity lifecycle workflows including user provisioning and deprovisioning processes-Familiarity with RBAC frameworks, delegation models, and least-privilege access principles-Working knowledge of Active Directory operational health including replication, DNS, and domain controller management-Familiarity with DISA STIGs and their application to directory services and identity infrastructure-Active Top Secret security clearance required; TS/SCI eligibility preferred-Microsoft certifications (MCSA, MCSE, or equivalent) a plusPreferred Qualifications-Prior experience in a DoD, IC, or cleared defense contractor environment-Familiarity with ADFS, SSO federation, and identity provider operations-Working knowledge of RMF, NIST 800-53, and the ATO process-Experience with PowerShell scripting for Active Directory automation and reporting-Familiarity with PKI infrastructure and certificate services in a DoD environment-Bachelor's degree in Information Technology, Computer Science, Systems Engineering, or a related field; equivalent experience considered-DoD 8570/8140 IAT Level II certification (Security+, or equivalent)

Skills

Systems engineering, Active directory

Additional Skills & Qualifications

Group policy configuration, identity lifecycle workflows, user onboarding, operational maintenance

Experience Level

Expert Level

Job Type & Location

This is a Contract position based out of Dallas, TX.

Pay and Benefits

The pay range for this position is $60.00 - $65.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

Workplace Type

This is a fully onsite position in Dallas,TX.

Application Deadline

This position is anticipated to close on Sep 30, 2026.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

We’re a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We’re a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We’re strategic thinkers, hands‑on collaborators, helping customers capitalize on change and master the momentum of technology. We’re building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance:

Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI):

We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.