G3 Innovative Solutions is an IT Services company founded to create innovative solutions to enhance the capabilities of our customers.  G3 employees have successfully satisfied the technology needs of the U.S. Government and we continue to maintain relationships with those who have specialized expertise in the federal market.  G3’s broad experience, focus toward desired outcomes, and commitment to Innovation ensures responsive and long-lasting results.

Job Description: G3 Innovative Solutions is seeking a Active Directory Engineer to support a position located in Arlington, VA supporting a Federal customer. The candidate will serve as an Active Directory Engineer providing the below described services.

Duties and responsibilities:

• Responding to customers Incident, Request, Problem, and Change Request relating to Credentialing, Identity Management, Active Directory and related services, system access, and provisioning within established SLA’s
• Provide support to Other Services, Technologies, and systems that will integrate into FBI Active Directory Domains, services, and Enclaves
• Monitor Domain Controllers to prevent outages and/or restore service in a timely manner, analyze the policies currently monitored, and make recommendations as needed to provide meaningful alerts for action.
• Provide guidance regarding changes to the AD schema;
• Manage and maintain standardized Organizational Units (OU) in AD;
• Manage and maintain AD custom attributes and groups (Security, Distribution, Mail enabled Security groups, etc.);
• Manage AD sites and subnets, including site replication;
• Manage and maintain group policy, and scripts associated with group policy, to secure the IT infrastructure and grant necessary resources to staff, consistent with job requirements (i.e. workstation, server, common Microsoft products such as Exchange, SharePoint and other group policies as requested);
• Create and maintain a Group Policy Map to indicate what each group policy does, what resource(s) is (are) affected, and understand the effect of any change to group policy
• Manage the AD database, System Volume (SYSVOL).
• Audit changes to accounts, group policy, and other changes to AD with enterprise auditing tools (i.e Dell Active Administrator, Change Auditor, and Recovery Manager).
• Share knowledge with other members of the full AD team
• Maintain a listing of all service accounts, the applications and servers which use them, and the unit responsible for the accounts
• Provision, modify, and de-provision user and administrator accounts on the four (4) enclaves upon receipt of approved access or de-provision request, based upon location, role, or both.  Accounts shall be provisioned/modified/de-provisioned within five (5) days of receipt or date specified in the request, whichever is later.  MDSU is currently receiving an average of 165 requests daily.  As part of this process, the Exchange mailboxes are also created.
• Make necessary adjustments to security controls to grant only that access to IT resources required for job performance.
• Manage user profiles, including access to share drives, OU assignment, password reset, and general directory cleanup at regular intervals.
• Support personnel moves by migrating user profiles and data to data stores associated with new location.
• Manage and maintain delegation of permissions.
• Develop automated and semi-automated capability to move user profiles and data within the infrastructure.
• Provide audit and tracking reporting capability for the management of user accounts.
• System monitoring (using SCOM, HP Operations Manager for Windows, Replication Administrator, Dell Active Administrator, Microsoft NetMon, Change Auditor, and Recovery Manager, NetWrix);
• Service Maintenance, Patching, and updates (security and functional updates);
• Minor software upgrades;
• Compete weekly status reports
• Develop and maintain Standard Operations Procedures
• Participate in AGIL Release Planning Events
• Be a Technical lead for Release Features and User Stories within the AGIL SCRUM process
• Assist Systems Administrators and other more junior members of the team resolve incident, problems, requests, and changes
• Provides updates to ICAM Active Directory Road Map
• Completing After Action Reports for Major Incidents, service degradations and interruptions, and security related events
• Completing system backup, service Archives, and restorations

 
Education: Bachelor's degree desired

Required Qualifications:

• A minimum of 10 years of experience as a Systems Engineer
• A minimum of 2 years of experience as a Technical Team Lead on a project with a similar scope/ size
• Advanced knowledge and Active Directory Domain Services, Identity Management, credentialing, and related services
• Active Directory
• DNS
• ADDF
• DHCP
• Applied knowledge of DISA STIGs,
• Systems Center Operations Manager
• Exchange 2016
• Skype for Business
• Microsoft teams
• NetWrix
• ADFS
• Knowledge and experience using FIM, (UAG)/(TMG)
• Knowledge and experience supporting authentication services, firewalls, high availability systems, and web services. The main focus for authentication services would include certificate authentication using Kerberos constrained delegation, and single sign-on;
• General understanding of PKI and certificate services
• General understanding of RSA management and support;
• Firewall endpoints, access and publishing policies, including the ability to troubleshoot connectivity issues in complex scenarios, with consideration of the outward lying network technologies;
• Possess a broad understanding of web services, including publishing and troubleshooting material published by internal and external sources. This experience must include an understanding of protocols used for web traffic and troubleshooting tools to diagnose connectivity issues.
• High Availability arrays, load balancing, and replication;
• Experience with SQL; LDAP and Secure LDAP; Dell Active Administrator
• VMWare, vSphere and Microsoft Hypervisor
• Experience with Microsoft Windows Server (i.e. 2012 r2, 2008 r2, and 2016, 2019
• Technical writing skills
• Ability to effectively share knowledge.

 
Clearance:

• Top Secret

 
Location:

• Arlington, VA

 
Compensation:  Negotiable
Benefits Offered:  401K, Medical, Dental, Life, Medical, Vision, and more
Employment Type: Full-Time
Clearance (Required): Must currently possess at least a Top Secret clearance