> Markdown version of [/jobs/ext/3235881-sr-system-engineer-active-directory-infrastructure](https://www.wearedevelopers.com/jobs/ext/3235881-sr-system-engineer-active-directory-infrastructure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. System Engineer - Active Directory Infrastructure - **Company:** Communications & Power Industries - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Active Directory, Artificial Intelligence, Systems Engineering, User Authentication, Microsoft Azure, Configuration Management, Dynamic Host Configuration Protocol, Disaster Recovery, Domain Name System (DNS), Monitoring of Systems, Kerberos (Protocol), Linux System Administration, System Center Configuration Manager, Windows Servers, NetApp Applications, NT LAN Manager, OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), Software Vulnerability Management, AI Infrastructure, Cloud Platform System, Microsoft InTune, Containerization, Information Technology, Patch Management, Enterprise Integration, Virtual Agents, Docker, Vmware - **Published:** September 16, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=54324a40ac02592d ## About the Role * U.S. Citizenship is required. Candidates requiring employment authorization through an EAD, visa, or other non-citizen work authorization are not eligible for consideration. * Advanced knowledge of AD with strong hands-on experience administering and troubleshooting multi-forest/domain/tenant environments * Experience with AD consolidation, migration, cleanup, restructuring, or modernization. * Advanced Windows Server administration and troubleshooting experience. * Strong experience with Windows patch management, vulnerability remediation, and systems lifecycle management leveraging MECM/Configuration Manager and/or Intune. * Strong PowerShell scripting and automation skills. * Hands-on experience with Microsoft Entra ID, hybrid identity, and directory synchronization. * Working knowledge of Kerberos, NTLM, SAML, OAuth/OIDC, AD CS, DNS, DHCP, and networking dependencies. * Ability to troubleshoot across infrastructure layers and work independently in a small, collaborative infrastructure team. * Strong documentation, communication, troubleshooting, and root-cause analysis skills. * Security and Compliance perspective, NIST 800-43, 171, CMMC, CUI, ITAR, ECI Preferred Qualifications * Bachelor's degree in Computer Science, Information Technology, or similar. * Experience with Active Directory security hardening, privileged access management, and least-privilege design. * Experience supporting VMware, NetApp, and/or Rubrik environments. * Experience with disaster recovery, business continuity, infrastructure monitoring, and enterprise lifecycle management. * Microsoft certifications related to Windows Server, Azure/Entra Identity, or Security. * Experience supporting regulated, defense, aerospace, or other security-sensitive environments. * Strong Linux administration experience and familiarity with Docker/containerized workloads. * Familiarity with Microsoft Azure Government / GCC High, including identity, security, networking, and compliance considerations. * Experience supporting AI infrastructure, agentic AI platforms, MCP (Model Context Protocol), AI gateways, or enterprise integration of AI workloads with identity and access controls., The ideal candidate is a hands-on infrastructure engineer who takes ownership, understands Active Directory at a deep technical level, and can independently diagnose and resolve difficult identity and Windows problems. You should enjoy cleaning up and improving environments, not simply maintaining them, and be comfortable balancing AD engineering, patching, security, automation, and broader infrastructure support in a small team. ## Description The successful candidate will have deep experience with enterprise Active Directory and Windows environments and will lead efforts involving AD consolidation, directory and Group Policy cleanup and maintenance, security hardening, lifecycle management, and patching. The role also provides cross-functional backup for virtualization, compute, storage, backup, and other infrastructure platforms. U.S. Citizenship is required. Candidates requiring employment authorization through an EAD, visa, or other non-citizen work authorization are not eligible for consideration. Primary Responsibilities * Serve as the primary administrator and technical SME for Microsoft Active Directory Domain Services (AD DS), in a multi-forest, multi-domain, and multi-tenant environment. * Design, implement, maintain, troubleshoot, and optimize Group Policy Objects (GPOs), security/WMI filtering, and policy performance. * Lead Active Directory consolidation, cleanup, restructuring, and modernization, including remediation of stale accounts/objects, legacy configurations, unnecessary policies, excessive privileges, and other directory complexity. * Administer and support Microsoft Entra ID and hybrid identity, including directory synchronization and authentication/authorization across on-premises and cloud environments. * Troubleshoot complex AD, Group Policy, DNS, Kerberos, NTLM, certificates, authentication, authorization, and replication issues. * Own and improve Windows Server and endpoint patching, using MECM/Configuration Manager and Intune including patch planning, deployment, compliance reporting, troubleshooting failed updates, and remediation of vulnerable or unsupported systems. * Provide senior-level backup and troubleshooting support for VMware compute/virtualization, NetApp storage, Rubrik backup and recovery, and related infrastructure. * Work with security and infrastructure teams on AD security hardening, privileged access, least privilege, vulnerability remediation, disaster recovery, and business continuity., With a history spanning more than seven decades, Communications & Power Industries' thousands of products have impacted people's lives in numerous unseen ways every day. Our highly engineered products serve as the backbone of modern-day commercial and military communications systems, assist in diagnosing medical conditions, empower scientific discoveries and space exploration, and much more. ## Related Videos - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Infrastructure as Prompts: Creating Azure Infrastructure with AI Agents](https://www.wearedevelopers.com/videos/1533-infrastructure-as-prompts-creating-azure-infrastructure-with-ai-agents) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Building Sovereign AI: Lessons from Deploying Secure RAG Systems using Confidential Computing](https://www.wearedevelopers.com/videos/100108-building-sovereign-ai-lessons-from-deploying-secure-rag-systems-using-confidential-computing) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)