Sr Systems Engineer

TEKsystems; United States; On-site; USD 91,000 - 129,000; Full time

Benefits offered by this job

Medical, dental & vision

401(k) Retirement Plan

Life Insurance

Job summary

TEKsystems in Richardson, TX is seeking a seasoned Identity/Directory Services engineer to lead AD forest and domain design, ADFS SSO deployment, and cross‑domain trust work across large government‑grade environments.

You will implement RBAC, GPOs, DISA STIG/NIST RMF alignment, and mentor junior engineers while producing design diagrams and configuration baselines.

Qualifications

• 8–10+ years in systems engineering with AD/identity management.
• Experience designing AD forests/domains in large gov/enterprise environments.
• Strong knowledge of ADFS, SSO protocols, and identity provider configuration.
• Cross-domain/cross-forest trust design in segmented networks.
• RBAC, GPO design, least-privilege access models.
• DISA STIG/NIST RMF in directory services.
• Active TS security clearance; TS/SCI preferred.
• Microsoft certifications (MCSE/Azure AD) a plus.
• DoD 8570/8140 IAT II/III cert is required.

Responsibilities

• Lead design and deployment of AD forest/domain architectures.
• Architect ADFS solutions enabling SSO across classified/unclassified systems.
• Design cross-domain/cross-forest trust relationships in complex networks.
• Develop RBAC, GPOs, and least-privilege models.
• Ensure DISA STIG/NIST RMF alignment for directory services.

Skills

Active Directory architecture

ADFS SSO

RBAC mapping

GPO design

PowerShell scripting

Identity management

Security compliance

Education

Bachelor's degree in CS/IT/SE

DoD 8570/8140 IAT Level II/III certification

MCSE/Azure AD certification

Tools

CyberArk

BeyondTrust

Azure Active Directory

PKI / certificate services

Job description

Description

What You’ll Do

• Lead the design and deployment of Active Directory forest and domain architecture, including multi-domain and multi-forest environments
• Architect and implement Active Directory Federation Services (ADFS) solutions to enable single sign-on (SSO) across classified and unclassified systems
• Design and configure cross-domain and cross-forest trust relationships in complex, segmented network environments
• Develop and enforce role-based access control (RBAC) frameworks, group policy objects (GPOs), and delegation models aligned with least-privilege principles
• Align directory services architecture with DISA STIG requirements, NIST 800-53 controls, and program-specific security policies
• Collaborate with cybersecurity teams to support ATO processes, RMF documentation, and identity-related continuous monitoring requirements
• Serve as the subject matter expert for identity and directory services, providing technical leadership and mentorship to junior engineers
• Troubleshoot and resolve complex Active Directory, ADFS, and identity federation issues across multi-domain environments
• Evaluate emerging identity and access management technologies and recommend solutions aligned with program roadmaps and government requirements
• Produce and maintain technical documentation including forest design diagrams, trust maps, RBAC matrices, and configuration baselines

What You Bring

• 8–10+ years of hands‑on experience in systems engineering with deep expertise in Active Directory architecture and identity management
• Demonstrated experience designing and deploying AD forest and domain structures in large‑scale enterprise or government environments
• Strong working knowledge of ADFS, SSO federation protocols (SAML, OAuth, WS‑Federation), and identity provider configuration
• Experience designing and managing cross-domain and cross-forest trust relationships in segmented or classified network environments
• Deep understanding of RBAC frameworks, GPO design, and least‑privilege access models
• Working knowledge of DISA STIGs, NIST 800‑53, and RMF as applied to directory services and identity infrastructure
• Active Top Secret security clearance required; TS/SCI eligibility strongly preferred
• Microsoft certifications (MCSE, Azure AD, or equivalent) a strong plus
• Preferred Qualifications-Prior experience supporting classified programs in a DoD, IC, or cleared defense contractor environment
• Familiarity with Azure Active Directory, hybrid identity architectures, and cloud identity integration
• Experience with Privileged Access Management (PAM) solutions such as CyberArk or BeyondTrust
• Familiarity with PKI infrastructure, certificate services, and smart card authentication in DoD environments
• Experience with PowerShell scripting for AD automation and administration
• Bachelor's degree in Computer Science, Information Technology, Systems Engineering, or a related field; equivalent experience considered
• DoD 8570/8140 IAT Level II or III certification (Security+, CASP+, CISSP, or equivalent)

Skills

Systems engineering, Active directory, adfs sso, trust configuration, rbac mapping, security alignment, Architecture, Design, Systems architecture

Top Skills Details

Systems engineering,Active directory,adfs sso,trust configuration,rbac mapping,security alignment

Additional Skills & Qualifications

AD forest design, ADFS SSO, trust configuration, RBAC mapping, security alignment

Experience Level

Expert Level

Job Type & Location

This is a Contract position based out of Richardson, TX.

Pay and Benefits

The pay range for this position is $80.00 - $80.00/hr.

Eligibility requirements apply to some benefits and may depend on your jobclassification and length of employment. Benefits are subject to change and may besubject to specific elections, plan, or program terms. If eligible, the benefitsavailable for this temporary role may include the following:

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre‑tax and Roth post‑tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

Workplace Type

This is a fully onsite position in Richardson,TX.

Application Deadline

This position is anticipated to close on Aug 13, 2026.

About TEKsystems

We’re partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

We’re a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We’re a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We’re strategic thinkers, hands‑on collaborators, helping customers capitalize on change and master the momentum of technology. We’re building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. A ...

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, ...