As a Systems Engineer/Administrator, the work you’ll do at GDIT will be impactful to the mission of USAREUR-AF G6. This role is responsible for the engineering, maintenance, and modernization of identity, credential, and access management (ICAM) infrastructure across hybrid environments. You will focus on safeguarding and enabling access to business critical Headquarters applications, integrating legacy authentication systems with enterprise-level solutions, and advancing automation through Infrastructure as Code (IaC) and DevSecOps practices.

The ideal candidate brings deep Windows Server and Active Directory expertise, hands-on experience with AD FS and Azure DevOps, and a strong commitment to secure, reliable, and automated solutions that support the DoWIN environment.Administer and optimize AD FS and ICAM services

• Administer multiple Active Directory Federation Services (AD FS) environments that support authentication and authorization for users accessing applications via the DoWIN
• Monitor, troubleshoot, and optimize federation services to ensure secure, highly available access to mission-critical applications
• Coordinate changes and updates with other identity and directory teams across the enterprise

Engineer integration solutions with enterprise ICAM providers

• Design and implement solutions to integrate existing and new applications with DoW-wide ICAM providers
• Develop technical designs, configuration standards, and documentation for application onboarding to centralized authentication and authorization services
• Collaborate with application owners and security stakeholders to ensure compliance with relevant DoW and USAREUR-AF policies

Manage on-premises DevSecOps platform

• Administer an on-premises DevSecOps platform, including creation of new repositories, pipeline configuration, and agent deployment/management
• Partner with development and operations teams to streamline CI/CD workflows, improve build and release reliability, and increase automation coverage
• Implement and maintain controls that support secure code management, branching strategies, and auditability

Design and implement Infrastructure as Code (IaC) solutions

• Design IaC solutions using tools such as Microsoft Desired State Configuration (DSC) or similar tools to standardize system configurations and automate system deployments
• Develop, test, and document reusable configuration templates and automation artifacts for Windows-based infrastructure and applications
• Continuously improve deployment reliability, configuration consistency, and time-to-delivery through automation

Deploy and maintain lab environments for research and testing

• Build and maintain lab environments used by development and operations teams for research, prototyping, and pre-production testing
• Coordinate refreshes, reconfigurations, and proof-of-concept efforts in support of modernization and migration activities

Support core Windows infrastructure operations

• Assist with Active Directory Domain Services (AD DS), Group Policy, and IIS web server operations as part of the broader operations team
• Contribute to patching, STIG hardening, security remediation, and performance tuning tasks for Windows Server platforms
• Participate in on-call or after-hours support rotations, as required by the mission

Computer Servers, Microsoft Windows Server, Scripting, System Administration, Systems Design, 5 + years of related experience, * Bring your technology expertise and drive for innovation to GDIT. The Systems Engineer/Administrator Senior must have:

• Education: Bachelor of Arts/Bachelor of Science
• Experience: 5+ years of related experience
• Security clearance level: U.S. SECRET with the ability to obtain TS/SCI
• ship required
• Meets DoD 8140 System Administrator Intermediate or Advanced certification requirements
• ITIL Foundation Certification.
• One of the following (or higher) Microsoft certifications:
• Windows Server Hybrid Administrator Associate, or
• DevOps Engineer Expert.
• Demonstrated experience with:
• Windows Server administration in an enterprise or DoW environment
• AD FS- configuration, operations, and troubleshooting
• AD DS - accounts, groups, OU structure, GPO application, and delegation
• Azure DevOps - repositories, pipelines, and agents
• Applying and interpreting STIGs for Windows Server and related technologies
• Strong PowerShell scripting skills for automation, configuration, and administration tasks

Preferred Qualifications / Desired Skills

• Experience with eMASS and the RMF processes
• Hands-on experience with DSC and/or similar configuration management frameworks
• Experience using Evaluate-STIG
• Strong Group Policy design and troubleshooting skills in complex AD environments
• Experience with containerization and orchestration
• One or more current cloud certifications

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support: An internal mobility team focused on helping you achieve your career goals
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY

Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.

defenseOCONUS

#GDITRecruiting #GDITArmy

The likely salary range for this position is $107,950 - $146,050. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Total compensation for international positions varies by tax, social security, and immigration statuses, as well as location. Generally, an international assignment may include allowances, premium uplifts, and/or relocation or transportation benefits, above base salary range noted.

Scheduled Weekly Hours: 40

Travel Required: Less than 10%

Telecommuting Options: Onsite

Work Location: International

Additional Work Locations:

Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process: As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.