Remote Active Directory & Identity Engineer

DecisionPoint | Cortek; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

DecisionPoint seeks an Active Directory / Identity Engineer to administer, sustain, secure, and recover the Microsoft AD DS environment supporting the USMEPCOM ENLIST program. This role manages AD objects, organizational units, Group Policy Objects, trusts, replication, schema changes, delegated permissions, domain services, and recovery capabilities.

The Active Directory / Identity Engineer provides direct, hands-on AD DS support while assisting with approved Identity, Credential, and Access

Qualifications

• Experience administering Microsoft Active Directory Domain Services.
• Proficiency in creating and managing OUs, GPOs, and trusts.
• Ability to test identity-management integrations and changes.
• Strong troubleshooting and incident response skills.
• Familiarity with disaster recovery and backup testing.

Responsibilities

• Administer, maintain, and recover AD DS and related directory objects.
• Manage OUs, users, groups, and service accounts with least-privilege access.
• Develop and test Group Policy Objects and links for environments.
• Monitor replication, trusts, and AD health; respond to incidents.
• Collaborate with cybersecurity, Service Desk, and cloud teams.
• Support identity modernization initiatives while preserving AD reliability.

Skills

AD DS administration

Group Policy

Identity & Access

Troubleshooting

Disaster recovery

Collaboration

Tools

Active Directory

AD FS / ADFS

Okta (Identity)**

Job description

DecisionPoint seeks an Active Directory / Identity Engineer to administer, sustain, secure, and recover the Microsoft AD DS environment supporting the USMEPCOM ENLIST program. This role manages AD objects, organizational units, Group Policy Objects, trusts, replication, schema changes, delegated permissions, domain services, and recovery capabilities.

The Active Directory / Identity Engineer provides direct, hands-on AD DS support while assisting with approved Identity, Credential, and Access