The Senior Directory Engineer provides support, implementation, and design services for Public Key Infrastructure (PKI), and Certificate Services, Microsoft Active Directory (AD), Active Directory Federation Services (ADFS), across the enterprise. Resolves and appropriately completes assigned tasks and change requests and acts as an escalation for support issues. Applies new solutions through research and collaboration with team and determines course of action for new application initiatives. Implements new software solutions as required by the business.

Shift: Note that this role is hybrid with 2 days/week at U.S. DOT HQ in Washington D.C.

Top Qualifications, Skills, Experience or Certifications:

Enterprise-level support for PKI, AD, and ADFS for global initiatives following those through to implementation via collaboration with project and support teams.

Identify opportunities to innovate, extend and enhance service delivery everywhere possible.

Perform Root Cause Analysis and Problem Management for directory services environment.

Serves as escalation point for application support and troubleshooting, provides guidance and direction in resolution of escalated issues and/or complex production, application, or system problems.

Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems, and key processes, reviewing system and application logs, and verifying completion of scheduled jobs.

Install, configure, and maintain Microsoft and third-party software utilities for hardware systems within company operational guidelines.

Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate troubleshooting steps.

Improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation.

Provide training as required

Job Role Specific Requirements:

Core responsibilities and duties; highlight day-to-day activities:

Windows Certificates Services Management [expert-level]

Active Directory Federation Services (ADFS), SAML, SSO [expert-level]

Public Key Infrastructure (PKI), PIV cards, Smart Cards [expert-level]

Active Directory architecture and management [expert-level]

Expert knowledge in creating, administering, and troubleshooting Group Policies (GPOs) [expert-level]

Azure Active Directory and Azure AD Connect [mid-level]

Azure AD Single Sign-on (SSO) federated authentication and enterprise application [mid-level]

Distributed File System including both DFS-N, and DFS-R [expert-level]

Windows Server Operating Systems (2012 R2 to 2022) [mid-level]

Develops security standards and controls per DISA STIGS and CISA requirements [mid-level]

VMware vSphere and Hyper-V Virtualization [mid-level]

Scripting Experience: PowerShell and VBScript [mid-level]

Windows Failover Clustering [mid-level]

Windows file shares and security administration [mid-level]

Windows Failover Clustering [mid-level]

Education and Certifications:

Microsoft Windows Server 2016, 2019, or 2022 Administration (MCSE, MCITP certification) or equivalent or

B.S. degree in a computer science, information technology, and computer related discipline or

7+ years IT work experience in a global information technology infrastructure environment