Identity and Directory Services Engineer

Peraton; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

Peraton is seeking an experienced Identity/Directory Services Engineer to join our national intelligence program. The role focuses on ICAM design, implementation, and ongoing maintenance of enterprise directory services, ensuring secure access and compliant operations across IT resources.

You will manage AD and ICAM integrations, maintain PKI and MFA enforcement, conduct risk assessments, and provide user training. Travel within the NCR may be required; employment contingent on contract award.

Qualifications

• Active TS/SCI clearance with ability to obtain Poly.
• Bachelor’s or Master’s degree with years of relevant experience, or equivalent experience.
• Strong working knowledge of Active Directory and ICAM platforms.
• Scripting and automation proficiency.
• Experience with Windows Server, PKI/certificate services, and schema extensions.
• Experience in incident response, security audits, and compliance monitoring.
• Certifications such as CISSP or Security+ are preferred.

Responsibilities

• Design, install, and configure the enterprise directory services infrastructure for security, stability, and performance.
• Manage Active Directory and related tech, integrating with ICAM systems.
• Maintain and optimize ICAM and Directory Services for performance, availability, and compliance.
• Manage user identities, access permissions, and IAM policies.
• Ensure regulatory and security standard compliance.
• Audit systems and access logs; review risk; patching and upgrades.
• Disaster recovery procedures for directory services.
• Provide ICAM training; troubleshoot and resolve root causes.
• Oversee PKI, certificates, and token operations; enforce MFA.
• Travel within NCR may be required.

Skills

TS/SCI clearance

Poly clearance

Active Directory

ICAM platforms

Scripting & automation

Windows Server

PKI/certificate services

Security incident response

Security audits

CISSP or Security+

ITIL

Cost-benefit analysis

Cloud & colocation

Education

Bachelor's degree

Master’s degree

High School Diploma

Tools

ICAM platforms

PKI certificates

Job description

BasicQualifications:

• Active Top Secret/ Sensitive Compartmented Information (TS/SCI) clearance with ability to pass a Poly clearances.

• Minimum of12years relevant experience with aBachelor’sdegree, Master’sdegree and10years ofrelevantexperience, orHigh School Diploma and 16yearsofrelevantexperience.

• Strongworking knowledge of ActiveDirectory Domain Services.

• Strong working knowledge ofICAMplatforms

• Proficiencyin scripting and automation.

• Experience withWindows Serverroles and features,PKI/certificate services, andschema extensions.

• Experience withincident response,security audits, andcompliance monitoring.

• CertifiedSecurity + or CISSP

Preferred Qualifications:

• Active TS/SCI with Poly clearances.

• Experiencein enterprise IT infrastructure, cloud solutions, and colocation services.

• Analytical skills for cost-benefit analysis and IT strategy development.

• ITIL or other applicable professional certifications.

• Familiarity with commercial off-the-shelf (COTS) solutions and their integration into enterprise environments.

SECURITY CLEARANCE:

This Positionrequiresan Active TS/SCI and the ability to obtain a CI Poly, US Citizenship isrequiredTo hold this clearance.

Job Description:

Peratonis seeking an experienced systemsIdentity/ Directory Services Engineerto join our national intelligence program that delivers engineering,infrastructuredevelopment, deployment,infrastructureoperations, upgrades and sustainment of products and services to achieve our client’s global missions.This position will focus onprovidingIdentityCredentialand AccessManagement(ICAM)to ensuresecure and efficientaccessand Directory Servicestodesign, implement andmaintainthe enterprise directory services infrastructure.

Responsibilities:

• Design, install, andconfigurethe enterprise’s directory services infrastructuretoensureits security, stability, and performance.

• ManageActive Directory (AD)and related technologies, integratingwithICAMsystems.

• Maintain andoptimizeICAMand DirectoryServices for performance,availabilityand compliance.

• Manageuser identities and access permissions to ensure secure and efficient access to IT resources.

• Create and manage identity and access management policies and procedures.

• Ensure compliance with regulations and security standards.

• Manageuser accounts, permissions, and access controls across systems and applications.

• Ensurethat only authorized users have access to sensitive data.

• Regularly review, analyze,and auditsystems andaccess logs.

• Test and apply patches, updates, and upgrades tomaintainsystemscurrentandsecure.

• Develop andmaintaindisaster recovery procedures fordirectory services.

• Conduct risk assessments and audits toidentifyvulnerabilities and recommend corrective actions to mitigate risks.

• Provide training to users onICAMpolicies and procedures.

• Troubleshoot issuesand provide solutions toeliminateroot causes.

• Issue ofPublic Key Infrastructure(PKI), Certificates,and TokensOperations
• Enforce Multi-FactorAuthentication for users.
• Travel may berequiredwithin the National Capital Region (NCR) on an as needed basis for customer or corporate requirements.

Position is Contingent on Contract Award