Senior Active Directory (AD) Engineer

Koniag Government Services; Bedford (MA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

401K Match

PTO 3 weeks

FSA

Job summary

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Senior Active Directory Engineer to support DoD-era government customers from Carson, CA, with additional duties at other sites. The role focuses on secure, highly available directory services across multiple sites and forests.

The candidate will design AD architecture, manage forest trusts, integrate ICAM with Entra ID, enforce STIGs, and automate tasks with PowerShell. DoD clearance is required per assignment.

Qualifications

• Experience managing large-scale, distributed AD environments in a DoD/federal context.
• Clearance required: Secret or higher (TS/SCI depending on assignment).
• IAT Level II/III and related DoD 8570 certifications are preferred.
• Expertise in AD DS, ADFS, Azure AD Connect, PKI.

Responsibilities

• Design and maintain Active Directory architecture including forests, trusts, domain controllers, and sites.
• Implement and support ICAM solutions including Entra ID in hybrid cloud environments.
• Hardening AD via STIGs and security controls across Tier 0-2.
• Create, test, and manage complex Group Policy Objects for enterprise security.
• Develop and maintain PowerShell scripts for provisioning, auditing, and health checks.

Skills

Active Directory

AD DS

ADFS

Azure AD Connect

PKI

PowerShell

Education

Security+ CE

DoD 8570 IAT Level II/III

Microsoft Identity and Access Administrator Associate

Job description

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Senior Active Directory (AD) Engineer to support KITS and our government customer in Carson, CA. This position is for a Future New Business Opportunity.The customer may need support as needed at other locations Columbus, OH, Bedford, MA, Fort Lee, VA, and Smyrna, GA.We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.This role is execution-oriented and ensures that the customer’s global directory services remain secure, compliant with Department of Defense (DoD) mandates, and highly available for thousands of users across multiple sites.

Primary Responsibilities:

Technology Experience:Experience with an Active Directory environment with multiple forests in an enterprise environment, Lightweight Directory Access Protocol (LDAP) directories, Public Key Infrastructure (PKI) systems, Enterprise Identity, Credential and Access Management (e-ICAM) and enclaves.

Forest & Domain Management:Design and maintain the customer’s Active Directory architecture, including forest trusts, domain controllers, and site topologies to ensure seamless replication across the Network.

ICAM & Identity Modernization:Implement and support Identity, Credential, and Access Management (ICAM) solutions, including the integration of Azure Active Directory (Entra ID) for hybrid cloud environments and Office 365.

Security & STIG Compliance: Hardening the AD environment by applying DISA STIGs (Security Technical Implementation Guides). This includes managing the Tier Model (Tier 0, 1, 2) to prevent privilege escalation and lateral movement.

Group Policy Governance: Create, test, and manage complex Group Policy Objects (GPOs) to enforce security settings and software configurations across the enterprise.

Automation: Develop and maintain advanced PowerShell scripts to automate routine tasks, such as bulk account provisioning, auditing, and health checks.

Required Qualifications:

Clearance Requirement: Most roles require at least a Secret clearance, with some requiring Top Secret (TS/SCI) depending on the sensitivity of the systems.

Certifications (DoD 8570):Must meet IAT Level II or III requirements. Common requirements include Security+ CE and a computing environment certification like Microsoft Certified: Identity and Access Administrator Associate.

Experience:Typically 8–10+ years of experience managing large-scale, distributed AD environments, specifically within a DoD or federal context.

Technical Skills:Deep expertise in AD DS, ADFS (Federation Services), Azure AD Connect, and PKI (Public Key Infrastructure)/Certificate Services.

Our Equal Employment Opportunity Policy

The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e‑mail at [e-mail] or by calling 703-488-9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long‑term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88‑352