Senior Systems Engineer - Active Directory

Insight Global; Brentsville (VA); On-site; USD 107,000 - 198,000; Full time

Job summary

Insight Global is seeking a Senior Systems Engineer specializing in Active Directory to design, implement, and modernize a large enterprise AD/Entra environment. This senior role focuses on architecture, domain controllers, security, automation, and hybrid identity rather than day-to-day administration.

You will collaborate with IAM, security, infrastructure, and architecture teams to drive future identity modernization involving Entra, Azure, and Intune, while building scalable, secure AD

Qualifications

• 5+ years designing and managing complex AD/Entra ID environments.
• Strong AD architecture knowledge: domains, forests, DCs, DNS, GPOs.
• Experience with governance tools such as Netwrix Directory Manager.
• Strong communication across technical and non-technical teams.

Responsibilities

• Design, support, and improve enterprise Active Directory infrastructure.
• Build, troubleshoot, secure, and harden domain controllers.
• Support a hybrid Active Directory and Microsoft Entra environment.
• Develop PowerShell automation for Active Directory processes.
• Improve monitoring and alerting across the AD environment.
• Review AD security findings and implement improvements.

Skills

Active Directory

Entra ID

PowerShell scripting

RBAC PAM

Hybrid engineering

Azure Intune

Domain Controllers

DNS and GPOs

Tools

Netwrix Directory Manager (NDM)

AD governance tools

Microsoft Entra tools

Job description

Job Description

We are seeking a Senior Systems Engineer specializing in Active Directory to support and modernize a large enterprise Active Directory environment. This is a senior engineering role focused on AD architecture, domain controllers, security, automation, and hybrid identity, rather than day-to-day Active Directory administration.

This person will serve as a senior technical resource for Active Directory while helping improve the organization's hybrid Active Directory and Microsoft Entra environment.

Responsibilities

• Design, support, and improve enterprise Active Directory infrastructure.
• Build, troubleshoot, secure, and harden domain controllers.
• Support a hybrid Active Directory and Microsoft Entra environment.
• Improve the management of service accounts, including gMSAs.
• Simplify complex AD group structures and access models.
• Develop PowerShell automation for Active Directory processes.
• Improve monitoring and alerting across the AD environment.
• Review AD security findings and help implement appropriate security improvements.
• Support privileged access, RBAC, and least‑privilege initiatives.
• Partner with IAM, security, infrastructure, endpoint, and architecture teams.
• Help drive future identity modernization involving Entra, Azure, and Intune.

The compensation for this position will be $107,000 - $198,000 based on years of experience.

This Position can sit in Urbandale Iowa, Manassas Virgina or Wilmington Delaware.

Skills and Requirements

-5+ years of Hybrid Engineering experience designing, implementing, and managing complex enterprise Active Directory and Entra ID environments.

-Strong knowledge of Active Directory architecture, including domains, forests, Domain Controllers, DNS, Group Policy, Sites and Services, and trusts.

-Experience with Active Directory governance and delegated administration tools, such as Netwrix Directory Manager (NDM) or similar technologies.

-Strong knowledge of Windows Server environments and Active Directory infrastructure.

-Strong understanding of Active Directory security best practices, including privileged access management (PAM), role‑based access control (RBAC), least privilege, and security hardening.

-Experience with disaster recovery and business continuity planning related to Active Directory.

-Strong written and verbal communication skills, with the ability to communicate technical concepts across both technical and non‑technical teams.

Preferred Qualifications

• PowerShell scripting and AD automation
• gMSA / managed service accounts
• Domain controller monitoring and alerting
• AD Certificate Services / PKI
• Netwrix, Quest, or ManageEngine
• SailPoint
• GitHub Actions / CI/CD
• M&A or domain consolidation
• Azure / Intune experience

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].