Sr. Systems Engineer

The Sr. Systems Engineer must be familiar with the following:

• AD forest design
• ADFS SSO
• trust configuration
• RBAC mapping
• Security alignment

Systems Engineer’s Responsibilities: -Lead the design and deployment of Active Directory forest and domain architecture, including multi-domain and multi-forest environments. -Architect and implement Active Directory Federation Services (ADFS) solutions to enable single sign-on (SSO) across classified and unclassified systems. -Design and configure cross-domain and cross-forest trust relationships in complex, segmented network environments. -Develop and enforce role-based access control (RBAC) frameworks, group policy objects (GPOs), and delegation models aligned with least-privilege principles. -Align directory services architecture with DISA STIG requirements, NIST 800-53 controls, and program-specific security policies. -Collaborate with cybersecurity teams to support ATO processes, RMF documentation, and identity-related continuous monitoring requirements. -Serve as the subject matter expert for identity and directory services, providing technical leadership and mentorship to junior engineers. -Troubleshoot and resolve complex Active Directory, ADFS, and identity federation issues across multi-domain environments. -Evaluate emerging identity and access management technologies and recommend solutions aligned with program roadmaps and government requirements. -Produce and maintain technical documentation including forest design diagrams, trust maps, RBAC matrices, and configuration baselines.

8-10+ years of hands-on experience in systems engineering with deep expertise in Active Directory architecture and identity management. -Demonstrated experience designing and deploying AD forest and domain structures in large-scale enterprise or government environments. -Strong working knowledge of ADFS, SSO federation protocols (SAML, OAuth, WS-Federation), and identity provider configuration. -Experience designing and managing cross-domain and cross-forest trust relationships in segmented or classified network environments. -Deep understanding of RBAC frameworks, GPO design, and least-privilege access models. -Working knowledge of DISA STIGs, NIST 800-53, and RMF as applied to directory services and identity infrastructure. -Active Top Secret security clearance required; TS/SCI eligibility strongly preferred., Prior experience supporting classified programs in a DoD, IC, or cleared defense contractor environment. -Familiarity with Azure Active Directory, hybrid identity architectures, and cloud identity integration. -Experience with Privileged Access Management (PAM) solutions such as CyberArk or BeyondTrust. -Familiarity with PKI infrastructure, certificate services, and smart card authentication in DoD environments. -Experience with PowerShell scripting for AD automation and administration. -Bachelor’s degree in Computer Science, Information Technology, Systems Engineering, or a related field; equivalent experience considered.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)