> Markdown version of [/jobs/ext/3876035-senior-systems-engineer-active-directory](https://www.wearedevelopers.com/jobs/ext/3876035-senior-systems-engineer-active-directory). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Systems Engineer - Active Directory - **Company:** Insight Global - **Location:** Bristow, VA, United States - **Experience:** Expert - **Salary:** $107,000.0 - $198,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Domain Controllers, Systems Engineering, Microsoft Azure, Continuous Integration, Disaster Recovery, Domain Name System (DNS), Github, Identity and Access Management, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Microsoft InTune, SailPoint, ManageEngine - **Published:** October 22, 2026 - **Apply:** https://dejobs.org/x/x/A4D15161DB8E4859A5BBC85745F6CAE2/job/ ## About the Role Responsibilities -Design, support, and improve enterprise Active Directory infrastructure. -Build, troubleshoot, secure, and harden domain controllers. Support a hybrid Active Directory and Microsoft Entra environment. -Improve the management of service accounts, including gMSAs. -Simplify complex AD group structures and access models. -Develop PowerShell automation for Active Directory processes. -Improve monitoring and alerting across the AD environment. -Review AD security findings and help implement appropriate security improvements. -Support privileged access, RBAC, and least-privilege initiatives. -Partner with IAM, security, infrastructure, endpoint, and architecture teams. -Help drive future identity modernization involving Entra, Azure, and Intune. -The compensation for this position will be $107,000 - $198,000 based on years of experience., 5+ years of Hybrid Engineering experience designing, implementing, and managing complex enterprise Active Directory and Entra ID environments. -Strong knowledge of Active Directory architecture, including domains, forests, Domain Controllers, DNS, Group Policy, Sites and Services, and trusts. -Experience with Active Directory governance and delegated administration tools, such as Netwrix Directory Manager (NDM) or similar technologies. -Strong knowledge of Windows Server environments and Active Directory infrastructure. -Strong understanding of Active Directory security best practices, including privileged access management (PAM), role-based access control (RBAC), least privilege, and security hardening. -Experience with disaster recovery and business continuity planning related to Active Directory. -Strong written and verbal communication skills, with the ability to communicate technical concepts across both technical and non-technical teams. Preferred Qualifications -PowerShell scripting and AD automation -gMSA / managed service accounts -Domain controller monitoring and alerting -AD Certificate Services / PKI -Netwrix, Quest, or ManageEngine -SailPoint -GitHub Actions / CI/CD -M&A or domain consolidation -Azure / Intune experience ## Description We are seeking a Senior Systems Engineer specializing in Active Directory to support and modernize a large enterprise Active Directory environment. This is a senior engineering role focused on AD architecture, domain controllers, security, automation, and hybrid identity, rather than day-to-day Active Directory administration. This person will serve as a senior technical resource for Active Directory while helping improve the organization's hybrid Active Directory and Microsoft Entra environment.