Senior System Engineer – Active Directory Infrastructure

This is a fully remote position, open to applicants in Texas.

📋 Description

• Act as the main administrator and technical subject matter expert for Microsoft Active Directory Domain Services within a multi-forest, multi-domain, and multi-tenant framework.

• Design, execute, maintain, troubleshoot, and enhance Group Policy Objects, security/WMI filtering, and policy effectiveness.

• Spearhead Active Directory consolidation, cleanup, reorganization, and modernization efforts.

• Address stale accounts/objects, outdated configurations, unnecessary policies, excessive privileges, and other directory complexities.

• Manage and support Microsoft Entra ID and hybrid identity, encompassing directory synchronization and authentication/authorization in both on-premises and cloud settings.

• Diagnose intricate issues related to AD, Group Policy, DNS, Kerberos, NTLM, certificates, authentication, authorization, and replication.

• Take ownership of and enhance Windows Server and endpoint patching utilizing MECM/Configuration Manager and Intune.

• Plan patches, deploy updates, report on compliance, troubleshoot unsuccessful updates, and resolve vulnerabilities or unsupported systems.

• Provide senior-level backup and troubleshooting assistance for VMware compute/virtualization, NetApp storage, Rubrik backup and recovery, and associated infrastructure.

• Collaborate with security and infrastructure teams on AD security hardening, privileged access, least privilege initiatives, vulnerability remediation, disaster recovery, and business continuity strategies.

⛳️ Requirements

• U.S. Citizenship is mandatory.

• Applicants needing employment authorization through an EAD, visa, or any other non-citizen work permit are not qualified.

• Extensive knowledge of Active Directory with significant hands-on experience in administering and troubleshooting multi-forest, multi-domain, and multi-tenant environments.

• Experience in Active Directory consolidation, migration, cleanup, reorganization, or modernization.

• Advanced experience in Windows Server administration and troubleshooting.

• Strong background in Windows patch management, vulnerability remediation, and systems lifecycle management using MECM/Configuration Manager and/or Intune.

• Proficient in PowerShell scripting and automation techniques.

• Practical experience with Microsoft Entra ID, hybrid identity, and directory synchronization.

• Working knowledge of Kerberos, NTLM, SAML, OAuth/OIDC, AD CS, DNS, DHCP, and networking dependencies.

• Capability to troubleshoot across infrastructure layers and work independently within a small, collaborative infrastructure team.

• Excellent documentation, communication, troubleshooting, and root-cause analysis abilities.

• Security and Compliance knowledge; familiar with NIST 800-43, 171, CMMC, CUI, ITAR, ECI.

• Bachelor’s degree in Computer Science, Information Technology, or a related field is preferred.

• Experience in Active Directory security hardening, privileged access management, and least-privilege design.

• Background in supporting VMware, NetApp, and/or Rubrik environments.

• Experience with disaster recovery, business continuity, infrastructure monitoring, and enterprise lifecycle management.

• Microsoft certifications related to Windows Server, Azure/Entra Identity, or Security.

• Experience in supporting regulated, defense, aerospace, or other security-sensitive environments.

• Strong Linux administration experience and familiarity with Docker/containerized workloads.

• Knowledge of Microsoft Azure Government/GCC High.

• Experience in supporting AI infrastructure, agentic AI platforms, MCP, AI gateways, or enterprise integration of AI workloads with identity and access controls.

🏝️ Benefits

• Competitive salaries.

• Comprehensive health and wellness programs.

• Career development opportunities.

• Generous retirement savings plan with company match.

• Attractive compensation package.

• Remote position.