> Markdown version of [/jobs/ext/1219008-sr-systems-engineer](https://www.wearedevelopers.com/jobs/ext/1219008-sr-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Systems Engineer - **Company:** TEKSYSTEMS INC. - **Location:** Cedar Rapids, IA, United States - **Experience:** Expert - **Contract:** Temporary contract - **Skills:** Active Directory, Active Directory Federation Services, Systems Engineering, Federated Identity Management, Identity and Access Management, OAuth, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), Single Sign-On, Smart Cards, Cyberark, Ws-federation, Information Technology - **Published:** July 9, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9021333/sr-systems-engineer ## About the Role 8-10+ years of hands-on experience in systems engineering with deep expertise in Active Directory architecture and identity management. -Demonstrated experience designing and deploying AD forest and domain structures in large-scale enterprise or government environments. -Strong working knowledge of ADFS, SSO federation protocols (SAML, OAuth, WS-Federation), and identity provider configuration. -Experience designing and managing cross-domain and cross-forest trust relationships in segmented or classified network environments. -Deep understanding of RBAC frameworks, GPO design, and least-privilege access models. -Working knowledge of DISA STIGs, NIST 800-53, and RMF as applied to directory services and identity infrastructure. -Active Top Secret security clearance required; TS/SCI eligibility strongly preferred., Prior experience supporting classified programs in a DoD, IC, or cleared defense contractor environment. -Familiarity with Azure Active Directory, hybrid identity architectures, and cloud identity integration. -Experience with Privileged Access Management (PAM) solutions such as CyberArk or BeyondTrust. -Familiarity with PKI infrastructure, certificate services, and smart card authentication in DoD environments. -Experience with PowerShell scripting for AD automation and administration. -Bachelor's degree in Computer Science, Information Technology, Systems Engineering, or a related field; equivalent experience considered. ## Description The Sr. Systems Engineer must be familiar with the following: - AD forest design - ADFS SSO - trust configuration - RBAC mapping - Security alignment Systems Engineer's Responsibilities: -Lead the design and deployment of Active Directory forest and domain architecture, including multi-domain and multi-forest environments. -Architect and implement Active Directory Federation Services (ADFS) solutions to enable single sign-on (SSO) across classified and unclassified systems. -Design and configure cross-domain and cross-forest trust relationships in complex, segmented network environments. -Develop and enforce role-based access control (RBAC) frameworks, group policy objects (GPOs), and delegation models aligned with least-privilege principles. -Align directory services architecture with DISA STIG requirements, NIST 800-53 controls, and program-specific security policies. -Collaborate with cybersecurity teams to support ATO processes, RMF documentation, and identity-related continuous monitoring requirements. -Serve as the subject matter expert for identity and directory services, providing technical leadership and mentorship to junior engineers. -Troubleshoot and resolve complex Active Directory, ADFS, and identity federation issues across multi-domain environments. -Evaluate emerging identity and access management technologies and recommend solutions aligned with program roadmaps and government requirements. -Produce and maintain technical documentation including forest design diagrams, trust maps, RBAC matrices, and configuration baselines. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Fake or News: LLMs Protect Each Other, Google Predicts Floods, and GitHub Copilot Loves COBOL - Niels Leenheer](https://www.wearedevelopers.com/videos/1860-fake-or-news-llms-protect-each-other-google-predicts-floods-and-github-copilot-loves-cobol-niels-leenheer) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Extending HTML with Web Components](https://www.wearedevelopers.com/videos/459-extending-html-with-web-components) ## Related Articles - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)