Sr Systems Engineer Jobs

Job Description: Top Skills - Must Haves Systems engineering Active directory AD FS SSO Trust Configuration RBAC Mapping Security Alignment Secondary Skills - Nice to Haves Architecture Design Systems architectureJob Description What You'll DoLead the design and deployment of Active Directory forest and domain architecture, including multi-domain and multi-forest environmentsArchitect and implement Active Directory Federation Services (ADFS) solutions to enable single sign-on (SSO) across classified and unclassified systemsDesign and configure cross-domain and cross-forest trust relationships in complex, segmented network environmentsDevelop and enforce role-based access control (RBAC) frameworks, group policy objects (GPOs), and delegation models aligned with least-privilege principlesAlign directory services architecture with DISA STIG requirements, NIST 800-53 controls, and program-specific security policiesCollaborate with cybersecurity teams to support ATO processes, RMF documentation, and identity-related continuous monitoring requirementsServe as the subject matter expert for identity and directory services, providing technical leadership and mentorship to junior engineersTroubleshoot and resolve complex Active Directory, ADFS, and identity federation issues across multi-domain environmentsEvaluate emerging identity and access management technologies and recommend solutions aligned with program roadmaps and government requirementsProduce and maintain technical documentation including forest design diagrams, trust maps, RBAC matrices, and configuration baselinesWhat You Bring8–10+ years of hands-on experience in systems engineering with deep expertise in Active Directory architecture and identity managementDemonstrated experience designing and deploying AD forest and domain structures in large-scale enterprise or government environmentsStrong working knowledge of ADFS, SSO federation protocols (SAML, OAuth, WS-Federation), and identity provider configurationExperience designing and managing cross-domain and cross-forest trust relationships in segmented or classified network environmentsDeep understanding of RBAC frameworks, GPO design, and least-privilege access modelsWorking knowledge of DISA STIGs, NIST 800-53, and RMF as applied to directory services and identity infrastructureActive Top Secret security clearance required; TS/SCI eligibility strongly preferredMicrosoft certifications (MCSE, Azure AD, or equivalent) a strong plusPreferred QualificationsPrior experience supporting classified programs in a DoD, IC, or cleared defense contractor environmentFamiliarity with Azure Active Directory, hybrid identity architectures, and cloud identity integrationExperience with Privileged Access Management (PAM) solutions such as CyberArk or BeyondTrustFamiliarity with PKI infrastructure, certificate services, and smart card authentication in DoD environmentsExperience with PowerShell scripting for AD automation and administrationBachelor's degree in Computer Science, Information Technology, Systems Engineering, or a related field; equivalent experience consideredDoD 8570/8140 IAT Level II or III certification (Security+, CASP+, CISSP, or equivalent) Work Environment Onsite-- travel between IA and TX Business Drivers/Customer Impact Secure Dev Environment build out External Communities