Active Directory Engineer

Position: Active Directory Engineer Location: Parsippany, NJJob Id:

1906-290-26-R-S

# of Openings: 1 Elevate your career at Marotta Controls, a New Jersey Top Workplace three years running! Dedicated to innovation, quality and excellence, we deliver cutting edge control systems for the Aerospace & Defense industry. At Marotta, we value bold thinking and teamwork, and we empower our employees to push boundaries while delivering top-tier solutions to our customers. Our team fosters a fun, collaborative culture where creativity and technical excellence thrive! Your next big opportunity starts here. Be part of a company where your work supports a mission that makes a difference—apply today!Active Directory EngineerEssential FunctionsThe Active Directory Engineer is responsible for designing, implementing, and supporting enterprise-level Active Directory Infrastructure, including forests, domain and organization units. This role is also responsible for Managing and supporting Group Policy Objects to enforce security, compliance, and configuration standards and implementing and enforcing security best practices such as least privilege, privileged access management (PAM), and auditing. The ideal candidate will have deep technical expertise, strong troubleshooting skills, and a security-first mindset.Minimum Required QualificationsBachelor’s degree in computer science or equivalentMust be a US CitizenTechnical solution design and planning experienceStrong knowledge of creating, managing and troubleshooting Group Policy ObjectBasic understanding of the project management life cycleFive to seven years’ hands-on experience administering and hardening Microsoft Active Directory in a multi-forest environmentExperience with Microsoft Entra (Azure AD) and hybrid identity architecturesExperience implementing and supporting Single Sign-On (SSO) technologies (SAML, Kerberos, NTLM)Experience implementing and administering MFA solutions, including Duo MFAExperience with identity lifecycle management and access provisioning/deprovisioningLeverage ADManager Plus tools to automate user provisioning, reporting, delegation, and bulk account management tasks. Experience implementing conditional access and identity security best practicesStrong PowerShell scripting skills for automation and administrationStrong attention to detailGood problem-solving skills with the ability to think creativelyExcellent written and verbal skills, including ability to clearly articulate technical issues and activities to technical and non-technical staffStrong interpersonal skills and the ability to adapt in a complex and changing environmentConsistently meet expected production, accuracy and quality standards as set by managementMust be team oriented with the ability to work independentlyAdditional Desired QualificationsExperience administering Microsoft 365 (user, license, and service administration)Experience with Privileged Access Management (PAM/PIM) solutionsFamiliarity with Zero Trust security principles and architectureExperience integrating SaaS and enterprise applications with Microsoft Entra IDFamiliarity with NIST 800-171 and CMMC requirements as they relate to identity and access managementExperience supporting audits or compliance assessments (e.g., CMMC, NIST, ISO, SOC)Experience with directory synchronization tools (e.g., Entra Connect / Azure AD Connect)Relevant certifications (e.g., Microsoft Identity, Azure Security Engineer, CISSP, CMMC-related certifications)ResponsibilitiesDesign, implement, and maintain Active Directory (AD) services in a multi-forest, multi-domain environmentAdminister and optimize Microsoft Entra (Azure AD), including hybrid identity integrationsImplement and support Single Sign-On (SSO) solutions for cloud and on-premises applicationsManage identity lifecycle processes (joiner, mover, leaver) using tools such as ADManagerConfigure and maintain authentication methods including MFA, conditional access, and federationEnsure secure access controls through role-based access control (RBAC) and least privilege principlesSupport identity architectures and configurations aligned with NIST 800-171 and CMMC security controlsMonitor and troubleshoot identity-related issues across on-prem and cloud platformsCollaborate with security, infrastructure, and application teams to integrate identity servicesAssist with audits, compliance assessments, and evidence collection related to identity and access controlsDevelop and maintain technical documentation, standards, and operational proceduresParticipate in identity modernization initiatives and continuous improvement effortsWork Environment:This job interacts both in a professional office environment and a manufacturing/machine shop environment. This role uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines, as well as environments inclusive of the appropriate eye, hearing and foot protection (as required).Night and weekend work could be required, as job duties demand.No travel is expected for this positionPhysical Requirements:While performing the duties of this job, the employee is regularly required to see, talk, and hearThe employee is frequently required to reach and lift with hands and arms, and to use hands to finger, handle or feelThe employee is regularly required to sit, stand, walk, bend, turn, etc., and move about the facilityThe employee may be required to lift, push, pull and/or move items weighing up to 25 poundsThis position is at our Parsippany NJ office location.The salary range is $108k - $130k/yearMany of our contracts require proof that you are a U.S. citizen and/or that an export license has been obtained for employees who are citizens of certain countries. Your employment, both initially and continually thereafter, is conditioned on production of such proof of citizenship and/or any export license that may be required to comply with any and all applicable laws, regulations, or executive orders, or required by Federal, State, or local government contracts.We offer a highly competitive compensation package for this outstanding position plus a quarterly bonus along with a full range of top quality benefits and employee services including: medical, prescription, dental, vision, life and disability income insurance programs, 401k retirement plans with company match, generous tuition aid program, paid vacation, sick and personal days, paid holidays and flexible work hours with compressed work week options. We recognize and reward our employee's accomplishments and host several employee engagement events per quarter.If you are looking to grow or accelerate your career and be part of a best in class organization while enjoying a work-life balance, please visit our website at to learn more about us and to apply. Check out all our openings at We are an Affirmative Action and Equal Opportunity employer M/F/IWD/VeteransVETERANS ARE ENCOURAGED TO APPLYNo agencies, please.Pay Range: $108,000 - $130,000 per year Apply for this Position