IT Security Engineer (Active Directory Engineer)

A270: AD Engineer (743704) Rate: $80.00/hour on W2Work Status: US Citizen, GC or Authorized to work - Sponsorship not available DHSWork Arrangement: HybridWorksite Address: Washington, DCSubmittals due: 08/13/2024Interviews: Either Webcam or In Person Background check: Extensive criminal history background check will be required. We cannot submit candidates with recent histories (go back seven years) of extensive driving, drug, robbery or any other illegal activity. Any criminal activity on the background check will eliminate the candidate from consideration. If selected, please make certain that you inform all candidates that they will have to complete this criminal background check prior to starting. NATIONAL background checks are required; Federal background checks are NOT compliant under this contract. A national background check is a national criminal background check that pulls criminal records from State and County Courts in almost every US State.Job Description:Short Description:A270: IT Security Engineer (Active Directory Engineer)*Hybrid Position - Must be able to report on-site**Req set to close on 8/13 for submissions. First screening will occur after 8/8 and daily thereafter*Complete Description:Active Directory EngineerDuties and ResponsibilitiesStrong understanding of AD Attributes, LDAP Queries, PowerShell Scripting to Modify AD Attributes, Group Policy Analysis, GPO Configuration & Item-Level Targeting, Workstation Configurations, Browser Configuration Settings, familiarity with VMView and other Applications that integrated with Active DirectoryStrong knowledge of permissions that are granted natively to various Microsoft Built-In Groups to perform Active Directory Administrative Functions, knowledge of native permissions granted when building AD objects, knowledge of permissions granted natively to Built-In Groups via GPOs and/or Local PoliciesThorough functional understanding and ability to configure Active Directory Server Roles (CAs, IIS, File/Print, DNS)Working knowledge of GPOs, AD Sites, Replication Topology, and native AD troubleshooting toolsThe Active Directory Engineer will plan, support, implement and design a directory synchronization system for Microsoft Active Directory and Windows-based systems across the enterprise, including directory and identity management solutionsImplementation of business-driven changes, Configuration of Group Policies and Integration of AD Management tools/servicesAnalysis, design and implementation of Active Directory and Identity Management solutionsIndependently manage and perform engineering lead role for large scale Active Directory and Identity Management projectsAnalyze current Active Directory environment to identify both technical and operational challenges and develop solutions for improvementAnalysis, design, capacity planning and implementation of Active Directory SecurityProvide data for regulatory compliance from Active Directory or support systems upon requestOversees and maintains the security and reliability of the corporate forest while insuring the integrity of the AD schemaPrimary person in charge of coordination for AD migration and integration activitiesInteract with customers, service managers, and operational support teams to design, test, and deploy security and/or automation solutions to meet business needsLeads the evaluation of technical requirements for projects to determine the impact to the infrastructure including equipment redundancy and capacity requirementsExceptionally strong articulation and communication skills required for daily interactive with System AdministratorsAbility to create Training Manuals, Presentation Decks using Microsoft Office ProductsAbility to read product documentation to conceptualize and implement solutions, build Domain Controllers and Member Servers to support Enterprise SolutionsDevelop and maintain repeatable processes documents that govern the installation, configuration, administration and maintenance of identity authorization processesTroubleshoot any and all problems that arise with any messaging production environmentEducationBachelor's degree in Computer Science or Information Technology or related fieldsMCSE certification preferredITIL v4 certification preferredQualifications10 or more years hands on experience with Microsoft Active DirectoryExperience developing technical engineering solutions that solve business problems and improve processes Experience in VBScript or PowerShell to develop complex automation scripts Experience with integration of applications with Active Directory via LDAP and Kerberos for authentication and authorization