Software Specialist V

job summary: We are seeking a high-caliber Windows Infrastructure Engineer/Architect to serve as the subject matter expert and primary technical lead supporting an essential federal agency program. In this role, you will hold architectural design ownership over core identity systems, PKI infrastructure, and Azure cloud integrations while setting technical standards across hybrid enterprise environments.

location: Washington, Washington, D.C. job type: Contract salary: $51 - 61 per hour work hours: education: Bachelors

responsibilities: KEY RESPONSIBILITIES

• Architect, secure, and maintain enterprise Active Directory, Microsoft Entra ID / Azure AD, and Enterprise PKI (AD CS) infrastructure.
• Design and implement Azure governance frameworks, Zero Trust security models, and cross-domain federated identity solutions.
• Automate infrastructure provisioning and configuration management using PowerShell, Python, Bash, and IaC tools.
• Deliver top-tier (Tier-3) troubleshooting, system maintenance, OS upgrades (Windows Server 2019/2022/2025), and incident resolution.
• Draft technical documentation, SOPs, and system architecture diagrams, presenting solutions to technical boards and client leadership.

qualifications: REQUIRED QUALIFICATIONS

U.S. Citizenship with an active or obtainable Public Trust clearance prior to start.

Bachelor’s degree in CS/IT/Engineering with 8+ years (or Master’s with 6+ years) of progressive Windows Infrastructure engineering experience.

6+ years of experience in cloud operations and Microsoft Azure engineering.

3+ years in a lead role with design and architecture ownership in an enterprise Windows environment.

Active Microsoft Certified Azure Administrator Associate (AZ-104) certification.

Active DoD 8570/8140 baseline certification (e.g., Security+, SSCP, GSEC).

Expertise in Active Directory, PKI / AD CS, federated identity (SAML, OIDC, OAuth), and federal compliance (NIST, FISMA, STIGs).

Proficiency in scripting languages (PowerShell, Python, or Bash) for automation tasks.

Local to the Greater Washington, DC area.

PREFERRED QUALIFICATIONS

Experience with configuration management and orchestration tools (Ansible, Chef, Puppet) and CI/CD pipelines.

Familiarity with ITIL4 processes and ServiceNow ticket handling.

Knowledge of server endpoint protection tools (Carbon Black, Symantec).

skills: Active Directory,AWS,Ansible,automation scripts,Microsoft Entra ID,Azure AD,Bash,CIS benchmarks,cloud infrastructure,Cloud Operations,cloud networking,CI/CD,Datacenter,disaster recovery,DNS,Enterprise Systems,federated identity,Hardware Infrastructure,identity and access management,IT infrastructure,Infrastructure-as-Code (IaC),domain authentication,load balancers,Microsoft Azure cloud,Azure,Microsoft Azure,Azure cloud,Visio,Windows,Windows environment,OAuth,OIDC,Public Key Infrastructure (PKI),PKI,Puppet,Python,RAID,SAML,virtual server,ServiceNow,SCSI,Symantec,system availability,integrations,VPNs,Visual Basic,PowerShell,Windows Server operating systems,Zero Trust,Zero Trust architecture,Zero Trust security,leadership,proactive,Architectural Design,Architecture,Scripting & Automation,automation,Blueprints,CIS,cost optimization strategies,presentation capabilities,diagrams,FISMA,FedRAMP,governance frameworks,Group Policy,NIST SP 800-53,Infrastructure Engineering,Infrastructure,lifecycle management,Microsoft Certified Azure Administrator Associate (AZ-104),NIST,operational support,federal compliance,security,security engineering,Stakeholder Communication,SSCP,technical architecture,technical review,lead technical

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact HRsupport@randstadusa.com.

Pay offered to a successful candidate will be based on several factors including the candidate’s education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.

,

KEY RESPONSIBILITIES

• Architect, secure, and maintain enterprise Active Directory, Microsoft Entra ID / Azure AD, and Enterprise PKI (AD CS) infrastructure.
• Design and implement Azure governance frameworks, Zero Trust security models, and cross-domain federated identity solutions.
• Automate infrastructure provisioning and configuration management using PowerShell, Python, Bash, and IaC tools.
• Deliver top-tier (Tier-3) troubleshooting, system maintenance, OS upgrades (Windows Server 2019/2022/2025), and incident resolution.
• Draft technical documentation, SOPs, and system architecture diagrams, presenting solutions to technical boards and client leadership.

Active Directory,AWS,Ansible,automation scripts,Microsoft Entra ID,Azure AD,Bash,CIS benchmarks,cloud infrastructure,Cloud Operations,cloud networking,CI/CD,Datacenter,disaster recovery,DNS,Enterprise Systems,federated identity,Hardware Infrastructure,identity and access management,IT infrastructure,Infrastructure-as-Code (IaC),domain authentication,load balancers,Microsoft Azure cloud,Azure,Microsoft Azure,Azure cloud,Visio,Windows,Windows environment,OAuth,OIDC,Public Key Infrastructure (PKI),PKI,Puppet,Python,RAID,SAML,virtual server,ServiceNow,SCSI,Symantec,system availability,integrations,VPNs,Visual Basic,PowerShell,Windows Server operating systems,Zero Trust,Zero Trust architecture,Zero Trust security,leadership,proactive,Architectural Design,Architecture,Scripting & Automation,automation,Blueprints,CIS,cost optimization strategies,presentation capabilities,diagrams,FISMA,FedRAMP,governance frameworks,Group Policy,NIST SP 800-53,Infrastructure Engineering,Infrastructure,lifecycle management,Microsoft Certified Azure Administrator Associate (AZ-104),NIST,operational support,federal compliance,security,security engineering,Stakeholder Communication,SSCP,technical architecture,technical review,lead technical