Domain Services Engineer

General Dynamics Information Technology; St. Louis (MO); On-site; USD 126,000 - 170,000; Full time

Job summary

General Dynamics Information Technology seeks a Domain Service Engineer to plan, build, and operate a large hybrid cloud system. You will manage 802.1X NAC with Cisco ISE, deliver secure Active Directory designs, and support DNS/DHCP, LDAP, and PKI across Windows and non-Windows endpoints.

Location is customer sites NGA Washington or NGA St. Louis; strong scripting, collaboration with Security, Network, and Systems teams, and Tier 3 escalation expertise are essential for success.

Qualifications

• 5+ years in AD administration or Sr. Engineer roles.
• Proficient in scripting (PowerShell, Python, Bash, or Perl).
• In-depth AD/LDAP authentication and administration knowledge.
• Experience with Azure AD Connect and Cisco Directory Synchronization.
• Implement and manage Cisco ISE enterprise architecture.
• Maintain NAC policies using 802.1X, MAB and Web Authentication.
• Act as Tier 3 escalation for complex 802.1X/RADIUS issues.

Responsibilities

• Manage uptime and lifecycle of the 802.1x architecture.
• Deliver secure, scalable Active Directory design per standards.
• Provide SME support for DNS, DHCP, and AD integration.
• Proactively manage environment and design for resiliency.
• Implement GPOs and troubleshoot related issues.
• Monitor replication between domain controllers, DNS and DHCP.
• Manage PKI systems and certificates.

Skills

Active Directory

Directory Synchronization

Scripting Languages

Tools

Cisco ISE

DNS/DHCP servers

PKI

Job description

**Req ID:** RQ227097

**Type of Requisition:** Regular

**Clearance Level Must Be Able to Obtain:** Top Secret SCI + Polygraph

**Public Trust/Other Required:** None

**Job Family:** IT Infrastructure and Operations

**Skills:**

Active Directory (AD),Directory Synchronization,Scripting Languages

**Experience:**

5 + years of related experience

**US Citizenship Required:**

Yes

**Job Description:**

GDIT is seeking a Domain Service Engineer to support the planning, building, and operations of a large, globally accessed, hybrid cloud computing system. The Domain Services Engineer provides support, implementation, and design services for ISE and Microsoft Active Directory and Windows-based systems across the enterprise, including directory and identity management solutions.

We are looking for an individual who will serve as our internal Domain Services team a broad scale of technologies, working with 802.1X network access control using Cisco Identity Services Engine (ISE), while simultaneously taking ownership of our core DDI (DNS, DHCP, and IPAM) services. Beyond day-to-day administration and Tier 3 engineering, this individual will play a vital role in designing, modernizing, and documenting system-level architectures to ensure our hybrid on-premises and cloud infrastructures are highly available, secure, and scalable. The ideal candidate will be a motivated self-starter with excellent written and verbal communication skills, who exceeds as an individual, as well as excels among peers in a team environment.

Job Duties include but are not limited to:

• Accountable for the management, uptime, and lifecycle of the organization’s 802.1x architecture.
• Deliver and implement a secure, scalable, and resilient Active Directory design, following industry best practices while adhering to Information Security standards.
• Provide SME level assistance and escalation support for all troubleshooting tasks related to DNS, DHCP, and AD, including but not limited to integration with Windows and non-Windows endpoints, authentication, role-based access controls, DNS, DHCP, etc.
• Manage the environment proactively, anticipating risks and issues, designing and engineering for resiliency. Take technical ownership of projects and systems accordingly.
• Facilitate the implementation of Group Policy Objects (GPO) based on stated requirements. Troubleshoot and resolve any GPO related issues that arise.
• Monitor and identify replication interruptions between domain controllers, DNS and DHCP Server configurations.
• Management of the Public Key Infrastructure (PKI) systems and certificates.

REQUIRED QUALIFICATIONS:

• 5+ years of experience in progressive roles from Active Directory Administrator to Sr. Engineer
• Knowledge of at least scripting languages (e.g. Powershell, Python, Bash, or Perl).
• In Depth understanding of Active Directory or LDAP authentication and administration.
• Advanced familiarity with enterprise directory synchronization tools such as Azure Active Directory Connect, Cisco Directory Synchronization, or others.
• Implement and Manage enterprise-wide architecture, deployment, and ongoing administration of Cisco ISE
• Maintain advanced network access control (NAC) policies, utilizing 802.1X, MAC Authentication Bypass (MAB), and Web Authentication.
• Act as a Tier 3 escalation point for complex 802.1X/RADIUS authentication issues, certificate mismatches, and supplicant-side issues across Windows, macOS, Linux, and IoT devices.

PREFERRED QUALIFICATIONS:

• An analytic mindset with the ability to define complex infrastructure problems, correlate logs across multiple systems (ISE, AD, DNS, Network Switches), and execute systematic resolutions.
• Someone who looks beyond immediate triage to design architectures that prevent future systemic failures.
• A strong capability to translate highly technical concepts to non-technical business stakeholders, and collaborate across siloed Network, Systems, and Security teams.
• Configure and optimize network device profiling, Cisco TrustSec (Security Group Tags), and Comply-to-Connect (C2C) architectures.
• Integrate Cisco ISE with Active Directory, Azure AD/Entra ID, PKI/Certificate Authorities, and SIEM tools for automated threat containment and compliance reporting.
• Evaluate existing infrastructure pipelines and propose architectural modernizations to leverage Zero Trust Network Architecture (ZTNA), automation, and hybrid-cloud capabilities.
• Architect, document, and present system-level designs that integrate on-premises systems, virtualization platforms, and public/private cloud environments.
• Experience working in a fast tempo government agency production IT environment.
• Experience troubleshooting various Microsoft Windows Server platforms' roles and features.

Location: Customer Site / NGA Washington or NGA St. Louis

US Citizenship Required

GDIT IS YOUR PLACE

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support: An internal mobility team focused on helping you achieve your career goals
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY

Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.

#RoverGSS

The likely salary range for this position is $125,800 - $170,200. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

**Total Rewards at GDIT:**

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

**Our Identity Verification Process:**

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work:

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.

Join our Talent Community to stay up to date on our career opportunities and events at https://gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans