Senior Systems Administrator (Directory Services)

We are seeking an experienced Senior Systems Administrator – Directory Services to lead the design, administration, and optimization of enterprise directory and identity platforms. This role requires deep expertise in Microsoft Active Directory, hybrid identity architectures, and secure authentication services across complex, multi‑domain environments. The ideal candidate will drive modernization efforts, strengthen identity security, and ensure the reliability and integrity of core directory services.

Key Responsibilities

Directory Architecture & Administration

• Design, administer, and support enterprise directory services (Active Directory, Entra ID/Azure AD, LDAP).
• Manage domain controllers, DNS, DHCP, trusts, sites, subnets, and replication topology.
• Lead directory upgrades, forest/domain migrations, consolidations, and restructuring efforts.
• Design and maintain forest/domain trusts and cross‑platform identity integrations.

Identity & Access Management

• Implement and maintain IAM policies, authentication standards, and access controls.
• Support hybrid identity solutions including AAD Connect, federation services, and SSO integrations.
• Integrate directory services with enterprise applications, SaaS platforms, and security tools.

Security, Hardening & Compliance

• Implement advanced security measures to protect directory services (tiering models, delegation, privileged access controls).
• Monitor directory health, performance, and security posture.
• Support compliance initiatives and audits (NIST, DoD, CIS, etc.).
• Ensure adherence to identity governance and least‑privilege principles.

Operations & Troubleshooting

• Diagnose and resolve complex authentication, authorization, replication, and GPO issues.
• Maintain optimal performance and stability of domain controllers and supporting infrastructure.
• Develop and maintain documentation, standards, and operational procedures.
• Collaborate closely with security, networking, cloud, and application teams.
  
  

Required Qualifications: 

• Bachelor’s degree in information technology or related field, and 8 years of experience. 4 years of additional experience may be substituted in lieu of a degree.
• 7 years of systems administration experience with a focus on directory services.
• Deep expertise in Microsoft Active Directory (multi‑domain, multi‑forest environments).
• Strong experience with Azure AD/Entra ID and hybrid identity architectures.
• Proficiency with Group Policy, PowerShell, and automation frameworks.
• DoD 8140 IAT Level II certification (e.g., Security+).
• Active TS/SCI clearance.

Desired Qualifications:

• Microsoft certifications (e.g., Microsoft 365 Certified, Identity and Access Administrator, Windows Server Hybrid Administrator).
• Experience with identity governance, privileged access management (PAM), or Zero Trust architectures.
• Familiarity with federation services (ADFS), Kerberos, SAML, OAuth, and modern authentication protocols.