Active Directory Engineer

Elevate your career at Marotta Controls, a New Jersey Top Workplace three years running! Dedicated to innovation, quality and excellence, we deliver cutting edge control systems for the Aerospace & Defense industry. At Marotta, we value bold thinking and teamwork, and we empower our employees to push boundaries while delivering top-tier solutions to our customers. Our team fosters a fun, collaborative culture where creativity and technical excellence thrive! Your next big opportunity starts here. Be part of a company where your work supports a mission that makes a difference-apply today!

Active Directory Engineer


Essential Functions

The Active Directory Engineer is responsible for designing, implementing, and supporting enterprise-level Active Directory Infrastructure, including forests, domain and organization units. This role is also responsible for Managing and supporting Group Policy Objects to enforce security, compliance, and configuration standards and implementing and enforcing security best practices such as least privilege, privileged access management (PAM), and auditing. The ideal candidate will have deep technical expertise, strong troubleshooting skills, and a security-first mindset.

Minimum Required Qualifications

Bachelor's degree in computer science or equivalent

Must be a US Citizen

Technical solution design and planning experience

Strong knowledge of creating, managing and troubleshooting Group Policy Object

Basic understanding of the project management life cycle

Five to seven years' hands-on experience administering and hardening Microsoft Active Directory in a multi-forest environment

Experience with Microsoft Entra (Azure AD) and hybrid identity architectures

Experience implementing and supporting Single Sign-On (SSO) technologies (SAML, Kerberos, NTLM)

Experience implementing and administering MFA solutions, including Duo MFA

Experience with identity lifecycle management and access provisioning/deprovisioning

Leverage ADManager Plus tools to automate user provisioning, reporting, delegation, and bulk account management tasks. Experience implementing conditional access and identity security best practices

Strong PowerShell scripting skills for automation and administration

Strong attention to detail

Good problem-solving skills with the ability to think creatively

Excellent written and verbal skills, including ability to clearly articulate technical issues and activities to technical and non-technical staff

Strong interpersonal skills and the ability to adapt in a complex and changing environment

Consistently meet expected production, accuracy and quality standards as set by management

Must be team oriented with the ability to work independently

Additional Desired Qualifications

Experience administering Microsoft 365 (user, license, and service administration)

Experience with Privileged Access Management (PAM/PIM) solutions

Familiarity with Zero Trust security principles and architecture

Experience integrating SaaS and enterprise applications with Microsoft Entra ID

Familiarity with NIST 800-171 and CMMC requirements as they relate to identity and access management

Experience supporting audits or compliance assessments (e.g., CMMC, NIST, ISO, SOC)

Experience with directory synchronization tools (e.g., Entra Connect / Azure AD Connect)

Relevant certifications (e.g., Microsoft Identity, Azure Security Engineer, CISSP, CMMC-related certifications)

Responsibilities

Design, implement, and maintain Active Directory (AD) services in a multi-forest, multi-domain environment

Administer and optimize Microsoft Entra (Azure AD), including hybrid identity integrations

Implement and support Single Sign-On (SSO) solutions for cloud and on-premises applications

Manage identity lifecycle processes (joiner, mover, leaver) using tools such as ADManager

Configure and maintain authentication methods including MFA, conditional access, and federation

Ensure secure access controls through role-based access control (RBAC) and least privilege principles

Support identity architectures and configurations aligned with NIST 800-171 and CMMC security controls

Monitor and troubleshoot identity-related issues across on-prem and cloud platforms

Collaborate with security, infrastructure, and application teams to integrate identity services

Assist with audits, compliance assessments, and evidence collection related to identity and access controls

Develop and maintain technical documentation, standards, and operational procedures

Participate in identity modernization initiatives and continuous improvement efforts

Work Environment:

This job interacts both in a professional office environment and a manufacturing/machine shop environment. This role uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines, as well as environments inclusive of the appropriate eye, hearing and foot protection (as required).

Night and weekend work could be required, as job duties demand.

No travel is expected for this position

Physical Requirements:

While performing the duties of this job, the employee is regularly required to see, talk, and hear

The employee is frequently required to reach and lift with hands and arms, and to use hands to finger, handle or feel

The employee is regularly required to sit, stand, walk, bend, turn, etc., and move about the facility

The employee may be required to lift, push, pull and/or move items weighing up to 25 pounds


This position is at our Parsippany NJ office location.

The salary range is $108k - $130k/year

Many of our contracts require proof that you are a U.S. citizen and/or that an export license has been obtained for employees who are citizens of certain countries. Your employment, both initially and continually thereafter, is conditioned on production of such proof of citizenship and/or any export license that may be required to comply with any and all applicable laws, regulations, or executive orders, or required by Federal, State, or local government contracts.

We offer a highly competitive compensation package for this outstanding position plus a quarterly bonus along with a full range of top quality benefits and employee services including: medical, prescription, dental, vision, life and disability income insurance programs, 401k retirement plans with company match, generous tuition aid program, paid vacation, sick and personal days, paid holidays and flexible work hours with compressed work week options. We recognize and reward our employee's accomplishments and host several employee engagement events per quarter.

If you are looking to grow or accelerate your career and be part of a best in class organization while enjoying a work-life balance, please visit our website at to learn more about us and to apply. Check out all our openings at

We are an Affirmative Action and Equal Opportunity employer M/F/IWD/Veterans

VETERANS ARE ENCOURAGED TO APPLY

No agencies, please.

Pay Range: $108,000 - $130,000 per year