Sr Systems Engineer with Security Clearance

Sr Systems Engineer What You'll Do
-Lead the design and deployment of Active Directory forest and domain architecture, including multi-domain and multi-forest environments
-Architect and implement Active Directory Federation Services (ADFS) solutions to enable single sign-on (SSO) across classified and unclassified systems
-Design and configure cross-domain and cross-forest trust relationships in complex, segmented network environments
-Develop and enforce role-based access control (RBAC) frameworks, group policy objects (GPOs), and delegation models aligned with least-privilege principles
-Align directory services architecture with DISA STIG requirements, NIST 800-53 controls, and program-specific security policies
-Collaborate with cybersecurity teams to support ATO processes, RMF documentation, and identity-related continuous monitoring requirements
-Serve as the subject matter expert for identity and directory services, providing technical leadership and mentorship to junior engineers
-Troubleshoot and resolve complex Active Directory, ADFS, and identity federation issues across multi-domain environments
-Evaluate emerging identity and access management technologies and recommend solutions aligned with program roadmaps and government requirements
-Produce and maintain technical documentation including forest design diagrams, trust maps, RBAC matrices, and configuration baselines
What You Bring
-8–10+ years of hands-on experience in systems engineering with deep expertise in Active Directory architecture and identity management
-Demonstrated experience designing and deploying AD forest and domain structures in large-scale enterprise or government environments
-Strong working knowledge of ADFS, SSO federation protocols (SAML, OAuth, WS-Federation), and identity provider configuration
-Experience designing and managing cross-domain and cross-forest trust relationships in segmented or classified network environments
-Deep understanding of RBAC frameworks, GPO design, and least-privilege access models
-Working knowledge of DISA STIGs, NIST 800-53, and RMF as applied to directory services and identity infrastructure
-Active Top Secret security clearance required; TS/SCI eligibility strongly preferred
-Microsoft certifications (MCSE, Azure AD, or equivalent) a strong plus
Preferred Qualifications
-Prior experience supporting classified programs in a DoD, IC, or cleared defense contractor environment
-Familiarity with Azure Active Directory, hybrid identity architectures, and cloud identity integration
-Experience with Privileged Access Management (PAM) solutions such as CyberArk or BeyondTrust
-Familiarity with PKI infrastructure, certificate services, and smart card authentication in DoD environments
-Experience with PowerShell scripting for AD automation and administration
-Bachelor's degree in Computer Science, Information Technology, Systems Engineering, or a related field; equivalent experience considered
-DoD 8570/8140 IAT Level II or III certification (Security+, CASP+, CISSP, or equivalent)