Windows Domain Controller Active Directory and Trellix McAfee ePolicy Orchestrator Administrator

Federal IT Consulting (FEDITC); San Antonio (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

FEDITC, LLC is seeking a Senior Windows Domain Controller/AD and Trellix/McAfee ePolicy Orchestrator Administrator in San Antonio, TX. The role requires DoD clearance and citizenship, with responsibilities spanning design, deployment, and compliance across enterprise endpoints.

You will manage AD, DCs, ePO, and policy distribution in secure environments, ensuring STIG alignment and robust monitoring. A strong background in Windows Server management and security governance is essential.

Qualifications

• BS degree in IT, Cybersecurity, Data Science, IS, or CS.
• Active DoD Secret clearance required.
• 5+ years with Windows Server and Active Directory in large networks.
• Experience with AD replication, Kerberos, LDAP, GPOs, and FSMO roles.
• Experience deploying enterprise tools on DCs (AV, vulnerability scanning).
• Strong knowledge of DISA STIGs and security baselines.

Responsibilities

• Design, engineer, update, and maintain ePolicy Orchestrator implementations.
• Ensure compliance with DISA STIGs, DoD ICAM, and DoDI 8520.03.
• Design, build, and test GPOs, task sequences, and system upgrades.
• Research and implement policies across Windows, Linux, iOS, MacOS, ChromeOS, Android endpoints.
• Deploy strategies for policy distribution in high-security cloud environments.
• Provide Site Admin support and Enterprise monitoring for GPOs and security groups.
• Expertise in DoD security directives and DHA cybersecurity requirements.

Skills

Active Directory Admin

Domain Controller Administration

Windows Server Administration

ePolicy Orchestrator (ePO)

Policy Auditor

Security Compliance & Vulnerability Mg

Performance Monitoring

PowerShell Scripting

DISA STIG Knowledge

Education

BS in IT / Cybersecurity / DS / IS / CS

Continued enterprise security training

Job description

Windows Domain Controller Active Directory and Trellix McAfee ePolicy Orchestrator Administrator

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission critical national security systems throughout the world directly supporting the Warfighter, DoD Leadership, & the country. We are proud & honored to provide these services.

Overview of position:

FEDITC is seeking a Windows Domain Controller/Active Directory and Trellix/McAfee ePolicy Orchestrator Administrator to work at San Antonio Tx

Senior Network Engineer/System Administrator with extensive Active Directory, Windows Domain Controller, and Trellix/McAfee ePolicy Orchestrator (ePO) experience. Deep expertise in implementing, managing, and optimizing ePO, Policy Auditor, and other components of the DISA Endpoint Security Solutions suite of tools in DoD environments.

United States Citizenship and an active Secret DoD Security Clearance is required to be considered for this position.

This is an upcoming opportunity contingent on contract award.

Responsibilities

Key Tasks:

• Design, engineer, update, and maintain ePolicy Orchestrator implementations across the enterprise.
• Ensure compliance with DISA STIGs, DoD ICAM Reference Design, and DoDI 8520.03.
• Design, build, and test configuration items such as task sequences, group policy objects, and system upgrades
• Research, analyze, and implement operational solutions across various technologies and operating systems using on-premises Group Policy, cloud-enabled policies, and Kiosk configurations for Windows, Linux, iOS, MacOS, ChromeOS, and Android endpoints.
• Design, research, engineer, and deploy strategies for policy distribution in high-security cloud environments.
• Provide Site Administrator support and Enterprise monitoring for Group Policy Objects, including initial troubleshooting and the addition of Security Groups to Group Policy Objects.
• Expertise in DoD security directives, DISA STIGs, and DHA cybersecurity requirements

Experience/Skills:

Technical Skills and Experience

• Active Directory (AD) & Domain Controller (DC) Administration
  • 5+ years managing Windows Server environments with Active Directory in large/complex networks.
  • Deep understanding of AD replication, Kerberos, LDAP, Group Policy, and FSMO roles.
  • Familiarity with performance tuning and troubleshooting on DCs.
• Windows Server Administration
  • Expertise in Windows Server 2016/2019/2022 internals, registry, event logs, and system services.
  • Knowledge of Windows security baselines (CIS, DISA STIG).
  • Prior experience deploying enterprise tools on DCs (AV, endpoint protection, vulnerability scanning).
• McAfee ePolicy Orchestrator (ePO) & Policy Auditor
  • Experience configuring, deploying, and managing agents/policies through ePO.
  • Understanding of Policy Auditor content packs, custom checks, and compliance reporting.
• Security Compliance & Vulnerability Management
  • Ability to map technical checks to compliance frameworks (e.g., NIST 800-53, PCI-DSS, SOX).
  • Familiarity with vulnerability and patch management processes.
• Performance & Monitoring Tools
  • Skilled with Windows PerfMon, Resource Monitor, and event tracing to baseline DC performance.
  • Ability to correlate PA scan impact with AD health (replication monitoring, dcdiag, repadmin).
• Scripting & Automation
  • Proficiency in PowerShell to automate pre-deployment health checks, reporting, and rollbacks.
  • Experience integrating scan results into SIEM dashboards or compliance workflows.

Education:

• A BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science
• Relevant continuing education in enterprise security or systems administration