Senior Systems Engineer Sr Active Directory

Accreditation Council for Graduate Medical Education; Quantico (VA); On-site; USD 130,000 - 222,000; Full time

Job summary

Join a forward-thinking company as a Senior Systems Engineer specializing in Active Directory. This role involves enhancing security, managing complex AD environments, and automating tasks with PowerShell. You'll collaborate with diverse teams to optimize existing systems and integrate new technologies. With a competitive salary range and comprehensive benefits, this position offers a rewarding career path in a dynamic environment focused on national security and defense. If you're passionate about technology and innovation, this opportunity is perfect for you.

Benefits

Health Insurance

Dental Insurance

Vision Insurance

401(k) Plan

Paid Time Off

Disability Insurance

Life Insurance

Recognition Programs

Qualifications

• 5+ years of experience in Active Directory management and support.
• Strong skills in PowerShell scripting for automation tasks.
• Experience with cloud platforms like Azure or AWS.

Responsibilities

• Manage and troubleshoot Active Directory environments and configurations.
• Author PowerShell scripts to automate deployment and management tasks.
• Implement security enhancements and monitor AD health.

Skills

Active Directory Technologies

PowerShell Scripting

Group Policy Management

Windows Server 2016+

DNS Troubleshooting

Security Documentation

Cloud Platforms (Azure/AWS)

C# Programming

Agile Methodologies

Education

Bachelor's Degree in IT

10 years of experience in lieu of degree

Tools

System Center Operations Manager (SCOM)

Microsoft Azure

AWS

Job description

Job Description

BAE Systems is offering an exciting opportunity to support an important and dynamic Department of Justice customer as a Senior Systems Engineer/Active Directory (SSE/Active Directory) supporting a highly capable and diverse team driving technical innovation. The SSE/AD shall routinely make group policy modifications to support the needs of the domain. The SSE/Active Directory shall review existing configurations of the replication topology for inconsistencies and deploy new configurations during site build. She/he shall author PowerShell scripts to automate deployment tasks. The SSE/AD shall configure and troubleshoot name resolution in an Active Directory-integrated split-brain DNS environment. The SSE/AD shall perform daily health checks of the enterprise, and up-channel findings with suggested remedies for implementation. The SSE/AD shall manage the Active Directory-based activation of Windows platforms. Implements security enhancements to the environment as directed by the CSO. The SSE/AD shall proactively review current Active Directory technologies, and present suggestions for those which may enhance the mission. The SSE/AD shall support the unit with other duties as assigned within the scope of work.

Required Education, Experience, & Skills

Minimum Education and experience required:

• Four (4) year college degree in system administration, information technology, computer science, computer engineering, plus five (5) years of experience in designing, managing, administering, documenting, troubleshooting, and supporting Active Directory components as detailed above OR in lieu of education ten (10) years of experience in designing, managing, administering, documenting, troubleshooting, and supporting Active Directory components within IT systems in both production and development environments.

Skill Level: At a minimum, the Senior Systems Engineer/Active Directory shall have demonstrated experience in:

• Providing support to multiple Active Directory (AD) technologies
• Monitoring and maintaining existing AD systems
• Authoring technical documentation of components and configurations of environments
• Prototyping new solutions to IT challenges and optimizing existing systems in light of new technologies as they come to market
• Enterprise-level experience with Active Directory Domain Services (AD DS) running within Windows Server platforms 2016 to present
• Designing hierarchy and delegation within AD DS based on mission needs and security requirements
• Planning integration of new domain controllers
• Monitoring AD DS health using inherent tools and System Center Operations Manager (SCOM)
• Reviewing and evaluating replication topology for optimization
• Managing trust relationships with outside entities
• Utilizing Group Policy to control resources
• Working knowledge of DISA STIGs and their implementation
• Evaluating policies and planning future policy needs
• Troubleshooting Group Policy processing issues
• Authoring Group Policy objects and modifications
• Maintaining DNS functionality and troubleshooting
• Utilizing split-brain DNS for multi-homed resources
• Designing and maintaining AD Federated Services and technologies
• Evaluating and integrating new AD technologies and architectures
• Maintaining AD Certificate Services (AD CS) health and evaluating new certificate issuing methods
• Evaluating two-factor authentication methods
• Collaborating with stakeholders in design and development
• Constructing PowerShell scripts for automation
• Creating and managing custom schema objects
• Analyzing current AD delegation and proposing zero-trust models
• Documenting product customization, integration, and validation
• Participating in strategy sessions and documentation development
• Drafting and reviewing procedures and security documentation
• Providing assistance to remote administrators
• Performing duties independently and liaising with support and management
• Participating in Change Control processes
• Documenting, testing, and deploying modernization technologies
• Resolving operational challenges and communicating ideas effectively
• Authoring and utilizing scripting languages for automation

Preferred Education, Experience, & Skills

Desired Skills and Experience:

• Experience with Microsoft Azure and/or AWS cloud platforms
• Designing and developing Federated Services
• Programming skills in C# and .NET for AD resource manipulation
• Maintaining code repositories for change management
• Working with vendor support for proactive AD analysis and remediation
• Experience in Agile environments
• Implementing Lean, Agile engineering, and DevSecOps principles
• Participation in project planning, development, and documentation

Pay Information

Full-Time Salary Range: $130,355 - $221,603

Please note: Salaries are determined by multiple factors, including skills, education, experience, and market conditions.

Employee Benefits

Benefits include health, dental, vision insurance, health savings accounts, 401(k), disability, life and accident insurance, paid time off, holidays, parental/military/bereavement leave, recognition programs, and other incentives.

About BAE Systems Intelligence & Security

BAE Systems, Inc., a subsidiary of BAE Systems plc, delivers defense, aerospace, and security solutions. Our work supports national security and defense missions, providing a rewarding career making a significant impact globally. Based in McLean, Virginia, our focus includes intelligence analysis, cyber operations, systems development, and more, enabling U.S. military and government operations to recognize, manage, and defeat threats.