Active Directory / Entra ID Administrator (Public Tust or Secret clearance)

HireClearedTalent; Washington (District of Columbia); On-site; USD 80,000 - 90,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k)

Paid time off

Job summary

HireClearedTalent in Washington, DC seeks a Systems Administrator specializing in Active Directory and Microsoft Entra ID to manage a hybrid identity environment, ensuring secure access, authentication, and federal compliance.

You will collaborate with the ICAM Team, ISSO, and security teams to administer identity services, troubleshoot access issues, implement security controls, and support compliance assessments across on-prem and cloud components.

Qualifications

• 4+ years Windows enterprise systems administration.
• Strong hands-on experience with Active Directory, Group Policy, DNS, DHCP, and permission delegation.
• 2+ years administering Microsoft Entra ID (Azure AD), including Conditional Access and MFA.
• Experience supporting hybrid identity environments using Entra Connect or Cloud Sync.
• Knowledge of FISMA requirements and NIST SP 800-53 controls.
• Experience preparing compliance reports and audit evidence.
• Knowledge of Microsoft 365 administration and authentication protocols (Kerberos, NTLM, SAML, OAuth/OIDC).
• Excellent technical documentation and communication skills.
• Bachelor's degree or equivalent professional experience.
• Ability to obtain and maintain a Public Trust or Secret clearance, if required.

Responsibilities

• Administer Active Directory users, groups, computers, and OUs across domains.
• Manage GPOs, DNS, DHCP, and domain controller health, patching, and replication.
• Review permissions, ACLs, and privileged group memberships.
• Support AD backups, recovery testing, and DC upgrades.
• Manage Entra ID users, groups, licensing, and administrative units.
• Configure Conditional Access policies and MFA; manage self-service password reset.
• Oversee directory roles, PIM, and periodic access reviews.
• Manage SSO, SAML/OIDC, and API permissions for applications.
• Operate Entra Connect/Cloud Sync for directory synchronization.
• Monitor logs, investigate identity alerts, and support security investigations.
• Maintain identity documentation and onboarding/offboarding processes.

Skills

Active Directory

Group Policy

DNS

DHCP

Entra ID / Azure AD

Conditional Access

MFA

Entra Connect / Cloud Sync

FISMA & NIST SP 800-53

Microsoft 365 administration

Kerberos/NLTM/SAML/OAuth/OIDC

Technical documentation

Education

Bachelor's degree in IT or related discipline

Tools

PowerShell

Microsoft Graph PowerShell SDK

Job description

Salary: $80,000–$90,000 annually, depending on experience, clearance, and location.

Work Schedule: Standard business hours, with occasional after-hours maintenance windows and participation in a shared on-call rotation.

Benefits: Health, dental, and vision insurance, 401(k), and paid time off.

We are currently hiring for a Systems Administrator – Active Directory & Entra ID position. This opportunity is focused on managing and maintaining a hybrid identity environment consisting of on-premises Active Directory and Microsoft Entra ID, ensuring secure identity management, access controls, authentication, and compliance with federal security requirements.

Position Overview:

The selected candidate will work closely with the ICAM Team Lead, service desk, Information System Security Officer (ISSO), security teams, and application teams. The role involves hands‑on administration of enterprise identity services, troubleshooting authentication and access‑related issues, implementing identity security controls, and supporting federal compliance assessments.

Key Responsibilities:

1. Active Directory Administration
   • Administer users, groups, computer accounts, and Organizational Units (OUs) across enterprise Active Directory domains.
   • Manage Group Policy Objects (GPOs), DNS, DHCP, and domain controller health, patching, and replication.
   • Review Active Directory permissions, access control lists (ACLs), and privileged group memberships.
   • Support Active Directory backups, recovery testing, and domain controller upgrades.
   • Manage cloud users, groups, licensing, and administrative units within Microsoft Entra ID.
   • Configure and maintain Conditional Access policies, Multi‑Factor Authentication (MFA), self‑service password reset, and authentication methods.
   • Administer directory roles, Privileged Identity Management (PIM), and periodic access reviews.
   • Manage enterprise application registrations, Single Sign‑On (SSO), SAML/OIDC configurations, and API permissions.
2. Federal Compliance – FISMA & NIST SP 800-53
   • Implement and maintain identity‑related security controls aligned with NIST SP 800-53, particularly Access Control (AC), Identification and Authentication (IA), and Audit and Accountability (AU).
   • Prepare compliance reports covering privileged accounts, inactive accounts, MFA coverage, and role assignments.
   • Collect and organize audit evidence for FISMA assessments, Authority to Operate (ATO) packages, and continuous monitoring activities.
   • Support System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and remediation activities.
   • Assist auditors and security assessors by providing system walkthroughs, screenshots, and relevant log evidence.
3. Hybrid Identity & Security Operations
   • Operate and troubleshoot Microsoft Entra Connect or Cloud Sync for directory synchronization.
   • Monitor sign‑in and audit logs, investigate identity‑related alerts, and support security incident investigations.
   • Maintain identity management documentation, operational procedures, and user onboarding/offboarding processes.
   • Collaborate with application and security teams on identity integrations, migrations, and access management requirements.

Required Qualifications:

• At least 4 years of experience in Windows enterprise systems administration.
• Strong hands‑on experience with Active Directory, Group Policy, DNS, DHCP, and permission delegation.
• At least 2 years of experience administering Microsoft Entra ID (Azure AD), including Conditional Access and MFA.
• Experience supporting hybrid identity environments using Entra Connect or Cloud Sync.
• Working knowledge of FISMA requirements and NIST SP 800-53 security controls.
• Experience preparing compliance reports, audit documentation, or security assessment evidence.
• Knowledge of Microsoft 365 administration, licensing, and authentication protocols such as Kerberos, NTLM, SAML, and OAuth/OIDC.
• Strong technical documentation and communication skills.
• Bachelor's degree in IT or a related discipline, or equivalent professional experience.
• Ability to obtain and maintain a Public Trust or Secret clearance, if required.

Preferred Qualifications:

• PowerShell scripting experience for automating Active Directory and Entra ID administration, preferably using Microsoft Graph PowerShell SDK.
• Familiarity with NIST Risk Management Framework (RMF), SSPs, POA&Ms, and ATO processes.
• Experience with FedRAMP, Microsoft GCC/GCC High, or other government cloud environments.
• Knowledge of DISA STIGs or CIS Benchmarks for Windows servers and domain controllers.
• Experience with PIM, identity governance, Azure RBAC, Microsoft Intune, or Microsoft Defender for Identity.
• Certifications such as Microsoft SC-300, CompTIA Security+, CAP, or CGRC.