Active Directory Systems Administrator - TS/SCI w/Poly

Active Directory Systems AdministratorOwn your opportunity to support national defense. Your work will help keep critical operations secure and connected across the global enterprise directly, contributing to a mission that protects our nation every day. CIS is growing, and we invite both our experienced incumbents and new team members to be part of what's next.

Incumbents bring invaluable mission insight, while new talent adds fresh ideas and energy. Together, we'll strengthen continuity and drive the next generation of innovation.MEANINGFUL WORK AND PERSONAL IMPACT As an Active Directory Systems Administrator supporting CIS, you will sustain and secure enterprise directory services that enable authentication, authorization, and identity management across complex, multinetwork environments. You will maintain Active Directory forests, domains, and Group Policy, ensure directory service availability, and deliver reliable identity driven capabilities that underpin critical mission systems.

Your work strengthens security, consistency, and operational readiness across the enterprise.KEY RESPONSIBILITIES:Administer and maintain Active Directory forests, domains, trust relationships, replication services, and enterprise directory componentsManage and troubleshoot identity services, including DNS integrated AD functions, authentication, Kerberos/NTLM, group membership, and object lifecycle managementCreate, maintain, and troubleshoot Group Policy Objects (GPOs) to enforce secure, standardized configurations across multiple networks and client baselinesPerform Tier 2/3 directory service support, resolving complex AD, DNS, GPO, and authentication issues across distributed environmentsSupport AD integrated services including certificate services, federation services, domain controllers, and directory dependent applicationsExecute domain controller deployments, configuration updates, schema extensions, and lifecycle upgrades in alignment with operational and security requirementsMonitor AD health, replication status, event logs, and performance to ensure availability and integrity of directory servicesMaintain directory service documentation, configuration baselines, and operational proceduresCollaborate with engineering, cybersecurity, and operations teams to support design changes, new identity capabilities, and secure directory implementationsExecute patching and compliance tasks for AD, DNS, and directory integrated systemsIdentify and remediate patching gaps, and document corrective actionsWHAT YOU'LL NEED TO SUCCEEDEDUCATION: Bachelor's degree in an IT-related field, or 8-12+ years of relevant IT experience in lieu of a degreeCERTIFICATION: Meet DoD 8140 Information Assurance Workforce certification requirements (e.g. Security+ CE, etc.)CLEARANCE: Active TS/SCI clearance with a favorable polygraphHands-on experience administering AD, Group Policy, DNS, and authentication services in enterprise or multidomain environmentsStrong knowledge of AD health monitoring, replication, domain controller management, OU structure design, and secure configuration practicesExperience troubleshooting complex authentication, GPO, DNS, and directory integrated application issuesFamiliarity with STIGs, patching workflows, vulnerability remediation, and configuration compliance requirementsStrong documentation, communication, and cross team collaboration skillsUS citizenship requiredLOCATION: Onsite