Identity & AD Engineer - ICAM/Okta Expert (Remote)

Computer World Services; United States; Remote; USD 130,000 - 150,000; Full time

Job summary

Computer World Services seeks an Active Directory / Identity Engineer to administer and secure the AD DS environment supporting the USMEPCOM ENLIST program. You will manage AD objects, OUs, GPOs, trusts, and recovery, while assisting ICAM testing and potential Okta integrations.

Work closely with cybersecurity, Service Desk, systems, cloud, network, and government identity stakeholders, with frequent COOP and disaster-recovery exercises. Remote position with Chicago-area preference.

Qualifications

• Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category.
• Minimum of six (6) years of relevant experience in Active Directory administration, identity engineering, Windows infrastructure, systems engineering, or a related discipline.
• Direct, hands‑on experience administering Microsoft AD DS in an enterprise environment, including objects, OUs, GPOs, trusts, replication, schema, delegated permissions, and directory recovery.
• Experience troubleshooting authentication, authorization, Group Policy, replication, and trust issues, and supporting AD backup, restoration, and disaster recovery.
• Experience testing identity integrations or supporting identity‑modernization activities, with an understanding of the distinction between core AD DS and external ICAM, federation, or cloud‑identity services.
• Strong written, verbal, analytical, and technical problem‑solving skills.

Responsibilities

• Install, configure, maintain, troubleshoot, and recover AD DS, and create, modify, disable, and delete authorized users, computers, groups, service accounts, and other directory objects.
• Implement and maintain the OU structure, and manage OU permissions and delegated administration using least-privilege principles, correcting excessive or conflicting access.
• Develop, test, deploy, and troubleshoot GPOs, including links, inheritance, precedence, security filtering, WMI filters, backups, and recovery; assess changes for security and customer impact before production.
• Configure, validate, and troubleshoot domain and forest trusts, reviewing direction, transitivity, authentication scope, and name-suffix routing.
• Maintain AD sites, subnets, site links, and replication topology; troubleshoot replication failures, latency, and lingering objects; and maintain domain-controller health, SYSVOL, DFSR, time sync, AD-integrated DNS, and FSMO roles.
• Support domain-controller installation, upgrade, demotion, and retirement and transitions to supported AD versions; support controlled schema extensions.
• Process escalated account, group, and permission changes; troubleshoot authentication, authorization, policy, trust, and replication issues; and improve identity-related Service Desk routing and knowledge content.
• Provide advanced support during identity and authentication incidents, elevate widespread failures through incident‑response procedures, and support root‑cause analysis and corrective actions.
• Maintain and execute AD backup, authoritative and non-authoritative restoration, deleted-object recovery, and forest-recovery procedures, and support COOP and disaster‑recovery exercises.
• Support integration testing between AD and Okta or other approved identity platforms, validating synchronization, authentication flows, attribute and group mappings, provisioning, and SAML, OIDC, OAuth, SCIM, or LDAP protocols, and documenting test results.
• Automate approved directory administration, health validation, and reporting; review audit information; apply DISA STIGs and security baselines; and support RMF controls, POA&M activities, and remediation.
• Maintain SOPs, recovery plans, configuration baselines, and directory diagrams, and provide directory-service health, risk, and modernization information for program reporting.

Skills

Active Directory

Identity engineering

Okta integration

GPO management

Group Policy

DISA STIGs

RMF controls

PKI

Education

Bachelor’s degree in Information Technology/Information Systems

Tools

PowerShell

Job description

Computer World Services seeks an Active Directory / Identity Engineer to administer and secure the AD DS environment supporting the USMEPCOM ENLIST program. You will manage AD objects, OUs, GPOs, trusts, and recovery, while assisting ICAM testing and potential Okta integrations.

Work closely with cybersecurity, Service Desk, systems, cloud, network, and government identity stakeholders, with frequent COOP and disaster-recovery exercises. Remote position with Chicago-area preference.