Directory Services Engineer - Identity & DDI

Specific Duties and Responsibilities:

• Design and Manage Enterprise AD Architecture: Own the lifecycle, health, and scalability of Active Directory forests, domains, and Domain Controllers.
• BlueCat: Design, configure, and manage enterprise DDI services (DNS, DHCP, and IPAM) using BlueCat. Troubleshoot and optimize BlueCat Address Manager and associated services to ensure high availability and integration with AD infrastructure.
• Implement Secure Identity Solutions: Deliver resilient and secure directory designs aligned with best practices and Information Security policies.
• Troubleshoot & Support Complex Environments: Provide tier-3 support for AD-related services including authentication, RBAC, DNS, DHCP, and integration with non-Windows systems.
• Group Policy Management: Deploy, configure, and troubleshoot GPOs to enforce enterprise-wide security and configuration policies.
• Replication Monitoring: Ensure continuity by identifying and resolving AD replication issues.
• Certificate Services: Manage enterprise Public Key Infrastructure (PKI) systems and digital certificates.
• Proactive Operations: Anticipate risks and design for resiliency, scalability, and performance in a dynamic, mission-critical environment.
• Project Leadership: Drive directory-related projects from design to implementation, working with cross-functional teams across the enterprise.

Required Qualifications:

• 5+ years of experience in Active Directory administration and engineering within large enterprise or federal environments.
• Direct experience administering and engineering DNS, DHCP, and IPAM solutions using BlueCat Address Manager or similar enterprise-grade DDI platforms.
• Bachelor’s degree in IT or related field (or equivalent combination of education and experience).
• Microsoft Certified Solutions Expert (MCSE) or similar certification.
• Proficiency in at least one scripting language such as PowerShell, Python, Bash, or Perl.
• Strong expertise in Active Directory or LDAP authentication, administration, and troubleshooting.
• Hands-on experience with directory synchronization tools (e.g., Azure AD Connect, Cisco DirSync, etc.).

Preferred Qualifications:

• Experience with Active Directory migrations and object consolidation across domains.
• Familiarity with custom AD schema extensions and advanced identity lifecycle management.
• Experience administering Azure Active Directory and configuring Single Sign-On (SSO) integrations.
• Strong knowledge of Windows Server platforms and related roles (DNS, DHCP, File Services, etc.).
• Previous experience in federal or high-tempo government IT environments.

Required Clearance:

• Active DoD TS/SCI