Active Directory Engineer (Top Secret Clearance Required)

TEKsystems; Richardson (TX); On-site; USD 93,676 - 126,739; Full time

Benefits offered by this job

Medical, dental & vision

401(k)

Life Insurance

HSA

Disability insurance

Transit benefits

EAP

PTO

Job summary

TEKsystems is seeking an Active Directory Engineer with an active Top Secret clearance for a contract role in Richardson, TX. The effort supports DoD programs and focuses on implementation, configuration, and operational readiness of the AD infrastructure.

Travel to Richardson, TX and Cedar Rapids, IA is covered, with up to 12 months duration and a 6-month funding period. You will implement and configure AD environments, manage forests/domains/trusts, and align GPOs with STIG requirements.

Qualifications

• Active Top Secret clearance is required.
• 5+ years of AD engineering, administration, or identity management in large enterprises.
• Experience deploying and administering AD in enterprise-scale environments.
• Proficiency with AD, GPO, DNS, domain controllers, and forests/trusts.
• Experience with IAM, RBAC, and least-privilege access controls.
• Security+ or higher (CASP+, CISSP) and IAT II certification preferred.

Responsibilities

• Implement and configure Active Directory environments per architecture.
• Maintain forests, domains, trusts, and OUs to support classified environments.
• Manage GPOs aligned with DISA STIGs and security standards.
• Administer users, accounts, roles, and access control.
• Support identity lifecycle management and RBAC administration.
• Configure ADFS and identity federation capabilities.
• Support cross-domain/forest trust implementation and health.
• Monitor AD health, DNS, replication, and domain controllers.
• Enforce least-privilege access controls and RBAC.
• Assist with STIGs, RMF, and audit readiness activities.
• Troubleshoot AD, GPO, DNS, authentication, and identity issues.
• Maintain technical docs, runbooks, and change records.
• Collaborate with infra, cybersecurity, virtualization, and networking teams.

Skills

Active Directory

Group Policy

DNS

Domain Controllers

Forests & Trusts

Identity & Access Management

RBAC

Troubleshooting

DISA STIG

IAT II Security+

Tools

PowerShell

Job description

TEKsystems is seeking an Active Directory Engineer with an active Top Secret clearance in Richardson, TX to support a Secure Distribution Environment (SDE) Infrastructure Deployment.

This effort supports classified engineering workloads associated with Department of Defense (DoD) programs. The environment architecture has already been defined, and the team is focused on implementation, configuration, integration, validation, troubleshooting, and operational readiness of the Active Directory infrastructure. The engagement is projected to last up to 12 months, with an initial 6-month funding period. During deployment, engineers will support implementation activities in Richardson, TX and Cedar Rapids, IA. All travel expenses associated with deployment activities will be covered.

What You’ll Do

• Implement and configure Active Directory environments in accordance with established architecture documentation and engineering standards.

• Configure and maintain Active Directory forests, domains, trusts, and organizational units in support of classified environments.

• Implement and manage Group Policy Objects (GPOs) aligned with DISA STIG requirements and organizational security standards.

• Perform Active Directory administration including user provisioning, account management, role assignments, and access control management.

• Support identity lifecycle management including onboarding, offboarding, account modifications, and RBAC administration.

• Configure and support Active Directory Federation Services (ADFS) and identity federation capabilities.

• Support cross-domain and cross-forest trust implementation and maintenance activities.

• Maintain Active Directory operational health including replication monitoring, DNS administration, domain controller management, and troubleshooting.

• Support implementation of least-privilege access controls and role-based access frameworks.

• Assist with security hardening, STIG implementation, and identity-related compliance activities.

• Support ATO documentation, RMF activities, continuous monitoring requirements, and audit readiness efforts.

• Troubleshoot and resolve Active Directory, Group Policy, DNS, authentication, and identity-related issues.

• Maintain accurate technical documentation, configuration records, operational runbooks, and change management records.

• Collaborate with infrastructure, cybersecurity, virtualization, and networking teams throughout deployment efforts.

Required Qualifications

• Active Top Secret security clearance.

• 5+ years of experience supporting Active Directory engineering, administration, or identity management in large enterprise environments.

• Experience implementing and administering Active Directory in enterprise-scale environments.

• Strong experience with:

• Active Directory

• Group Policy (GPO)

• DNS

• Domain Controllers

• Forests and Trusts

• Identity and Access Management

• Experience managing user lifecycle processes, permissions, and RBAC models.

• Experience supporting Active Directory operational health and troubleshooting activities.

• Familiarity with DISA STIG requirements and secure configuration practices.

• Strong troubleshooting and problem-solving skills.

• IAT II certification such as Security+ or higher (CASP+, CISSP).

• Ability to work onsite in classified environments.

Preferred Qualifications

• Experience supporting DoD, IC, or cleared defense contractor programs.

• Experience with ADFS, SSO, and identity federation technologies.

• Familiarity with RMF, NIST 800-53, and ATO processes.

• Experience supporting classified environments with Active Directory infrastructure.

• Experience with PowerShell scripting and Active Directory automation.

• Familiarity with PKI, certificate services, smart card authentication, or privileged access management solutions.

• Azure Active Directory / Entra ID experience.

• Microsoft certifications (MCSA, MCSE, Azure Administrator, Azure Identity, or equivalent).

Job Type & Location

This is a Contract position based out of Richardson, TX.

Pay and Benefits

The pay range for this position is $80.00 - $80.00/hr.

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre‑tax and Roth post‑tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long‑term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

Workplace Type

This is a fully onsite position in Richardson, TX.

Application Deadline

This position is anticipated to close on Jul 31, 2026.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.