Active Directory Operations Engineer

DescriptionThis position is in support of the Department of State (DoS) as a part of the Vanguard 2.2.1 contract. The candidate will be responsible to support the on-premise and cloud based authentication applications and other services securing the DoS IT infrastructure. Experience with Azure Connect Health and configuring Conditional Access Policies to meet the system owner’s business requirements are preferred.This role requires an in-depth knowledge of the Active Directory, DNS, Azure Monitor (SCOM), MECM (SCCM), group policy and a proficiency in PowerShell scripting. The candidate must have demonstrated prior and active experience in managing Active Directory including diagnosing complex replication, group policy, and multi domain issues. The candidate will support the continuing goal of incorporating these innovative technologies into the Department’s equipment modernization program.The successful candidate will be a self-starter, someone who can work independently, and will be flexible in a fast-paced environment.Shift/Schedule Info:The role allows for 1 day/week of telework. Subject to change based on customer requirements.1 weekend day will be part of the normal workweek rotation. There are two shifts available: 7:30am-3:30pm3:30pm-11:30pmDescription of Duties:Active Directory liaison with the other project teams.Participate with the engineering groups to implement and support a new directory related services.Lead and Participate in Technical meetings.Ensure Line and services manager is made aware of potential system problems or customer issues to avoid surprising management personnel.Create AD test plans, technical specifications, work instructions, and white papers as required.Communicate regularly to Government leads regarding project activities and status.Onboard the application in Azure AD.Help application owners to create service principal name (SPN) if it is not already configured.Create Kerberos Constrain Delegation (KCD) for single sign-on (SSO).Replicate the changes to three (3) Active Directory core site.Configure, manage, add, delete, change user/groups/computers in Azure AD and AD.Create DNS records.QualificationsRequired Education and Experience:Bachelor’s degree with 5+ year’s recent system engineering experience. Additional training and experience may be substituted in lieu of a degree.Experience with Windows Administration and Active Directory support.Proficiency authoring PowerShell scripts for task automation.A Strong understanding of DNS Management.Strong understanding and practical experience using of Group Policy for server management.Foundational to advance proficiency with Azure Monitor (SCOM) and Microsoft Endpoint Manager (MECM/SCCM).Required Clearance:Ability to obtain an interim top secret clearance with the ability to obtain and maintain a Top Secret clearance.US Citizenship.Desired Experience, Skills & Attributes:Microsoft MSCE certification.Familiarity with DoS processes.Microsoft and/or networking certifications.Ability to apply ITIL v4 Foundation concepts within the workplace.Excellent interpersonal and team skills.Strong writing skills.Job Field: Engineering and SciencesTravel: No