Senior Active Directory Engineer: Identity & GPO Expert

TEK Systems; Dallas (TX); On-site; USD 83,000 - 90,000; Full time

Benefits offered by this job

Medical, dental & vision

401(k) Retirement Plan

Job summary

TEKsystems seeks an experienced Systems Engineer specializing in Active Directory to design, configure, and maintain Group Policy Objects across enterprise environments in line with DISA STIGs and security policies.

You will manage identity lifecycles, onboarding workflows, RBAC-based access, and perform routine AD health tasks with a focus on least-privilege access. This contract role is onsite in Dallas, TX, with TS/SCI considerations and DoD-style environments.

Qualifications

• 5–7+ years of hands-on experience in systems engineering or systems administration with a focus on Active Directory and identity management.
• Solid working knowledge of Group Policy configuration, management, and troubleshooting in enterprise environments.
• Experience managing identity lifecycle workflows including user provisioning and deprovisioning processes.
• Familiarity with RBAC frameworks, delegation models, and least-privilege access principles.

Responsibilities

• Design, configure, and maintain GPOs across Active Directory environments in alignment with DISA STIG requirements.
• Manage identity lifecycle workflows including user provisioning, modification, and deprovisioning across classified and unclassified systems.
• Support ATO documentation, RMF activities, and continuous monitoring in coordination with cybersecurity teams.

Skills

Active Directory

Group Policy

Education

Bachelor's degree in Information Technology/Computer Science/Systems Engineering

DoD 8570/8140 IAT Level II certification (Security+)

Tools

PowerShell scripting

Job description

TEKsystems seeks an experienced Systems Engineer specializing in Active Directory to design, configure, and maintain Group Policy Objects across enterprise environments in line with DISA STIGs and security policies.

You will manage identity lifecycles, onboarding workflows, RBAC-based access, and perform routine AD health tasks with a focus on least-privilege access. This contract role is onsite in Dallas, TX, with TS/SCI considerations and DoD-style environments.