Active Directory Engineer/SME

Clearance Required: Top Secret
A minimum of Security+ certification is required to start. A DoD 8580 IAT III certification will be required within 180 days (i.e. CASP+CE, CCNP Security, CISA, GCIH, GCED, or CISSP (or Associate))
Professional level certification, i.e. MCSA Windows Server 2012/2016/2019, MCSE Core Infrastructure, Microsoft Windows Server Hybrid Administrator
Thorough working knowledge of Windows Server 2012/2016/2019
Thorough working knowledge of Active Directory as it relates to enterprise technologies
Ability to evaluate the need for any messaging system reconfigurations (minor or significant)
Ability to maintain policies, procedures, and training plans for messaging system administration and appropriate use
Ability to identify and troubleshoot server performance issues using native Windows Server tools and utilities
Maintain a “forward looking” posture and work with management to plan for future upgrades, including Active Directory migration to the newer versions.

Maintain the overall health of technologies associated with AD and internal DNS
Resolve Active Directory tickets escalated from the service desk to include completing the associated administrative activities and provide a weekly status report
Coordinate incident tickets between Tier II and III sections as well as other sections as required
Provide documentation, guidance and instruction to Tier II, and service desks for handling standard Active Directory related incidents, work orders, and service requests
Provide Active Directory Service Desk Resolution Reports documentation to the service desk on the procedures for completing the task
Submit and execute AD related Request for Change tasks
Monitor the system availability and performance of AD with Government-provided event management tools, and take corrective action with regard to incidents that lower the health of AD
Provide project support for AD related technologies
Coordinate with the Engineering Team and other sections on AD-related issues
Support change management process; submit requests through Change Approval Board; and participate in Change Review Boards
Escalate product issues to third party product vendors upon Government approval
Implement monitoring tool thresholds and conduct proactive event remediation
Provide analysis and remediation for DISA Security Technical Implementation Guidelines (STIG) for all responsible technologies in preparation for the annual Commanders Cyber Readiness Inspections (CCRI)

7 years related experience
Firewall, Demilitarized Zone (DMZ) experience configuring, certificate configuring; troubleshooting
Experience with PowerShell commands needed to manage Active Directory features, roles, mailboxes, performance and troubleshooting
Experience maintaining policies, procedures, and training plans for Active Directory system administration and appropriate use
Experience in building, tuning and maintaining servers in an enterprise environment
Strong experience with Active Directory 2012/2016/2019, planning, deploying and migration, including experience with mailbox server failover and cluster management
Extensive knowledge of AD architecture – databases and logs, mail routing and protocol support
Good communication and interpersonal skills
Ability to follow policies and procedures
Ability to communicate in a clear speaking voice as well as the ability to respond clearly to questions
Aptitude to address negative situations and resolve them in a positive manner