TS-Systems Engineer with Security Clearance

What You'll Do

• Design, configure, and maintain Group Policy Objects (GPOs) across Active Directory environments in alignment with DISA STIG requirements and organizational security policies
• Manage identity lifecycle workflows including user provisioning, modification, and deprovisioning across classified and unclassified systems
• Execute user onboarding processes, including account creation, role assignment, access provisioning, and documentation in accordance with RBAC frameworks
• Perform ongoing operational maintenance of Active Directory infrastructure including replication monitoring, DNS health, domain controller management, and schema updates
• Support the enforcement of least-privilege access principles through regular access reviews and role-based permission audits
• Assist senior engineers with trust configuration, ADFS operations, and identity federation maintenance tasks
• Troubleshoot and resolve Active Directory, GPO, and identity-related issues in a timely manner
• Support ATO documentation, RMF activities, and continuous monitoring efforts in coordination with the cybersecurity team
• Maintain accurate technical documentation including GPO inventories, identity workflow diagrams, and operational runbooks

What You Bring
-5–7+ years of hands-on experience in systems engineering or systems administration with a focus on Active Directory and identity management

• Solid working knowledge of Group Policy configuration, management, and troubleshooting in enterprise environments
• Experience managing identity lifecycle workflows including user provisioning and deprovisioning processes
• Familiarity with RBAC frameworks, delegation models, and least-privilege access principles
• Working knowledge of Active Directory operational health including replication, DNS, and domain controller management
• Familiarity with DISA STIGs and their application to directory services and identity infrastructure
• Active Top Secret security clearance required; TS/SCI eligibility preferred
• Microsoft certifications (MCSA, MCSE, or equivalent) a plus

Preferred Qualifications

• Prior experience in a DoD, IC, or cleared defense contractor environment
• Familiarity with ADFS, SSO federation, and identity provider operations
• Working knowledge of RMF, NIST 800-53, and the ATO process
• Experience with PowerShell scripting for Active Directory automation and reporting
• Familiarity with PKI infrastructure and certificate services in a DoD environment
• Bachelor's degree in Information Technology, Computer Science, Systems Engineering, or a related field; equivalent experience considered
• DoD 8570/8140 IAT Level II certification (Security+, or equivalent)