Responsibilities:

Endpoint Policy Management:

• Craft, implement, and maintain Group Policy Objects (GPOs) to fortify endpoint security across the enterprise.
• Ensure all endpoints adhere to Air Force security policies and standards.
• Conduct regular audits and assessments to identify and remediate non-compliance.
• Collaborate with our security wizards to integrate cutting-edge security practices into endpoint policies.
• Monitor and report on the effectiveness of endpoint policies, suggesting improvements to keep us ahead of the curve.

AD Sites and Services:

• Familiarity with AD Sites and Services to design/troubleshoot new program office locations.
• Ensure optimal performance and availability of AD services across all sites.
• Implement and maintain site-specific policies and configurations.

Role-Based Access Control (RBAC):

• Create and maintain security groups for tool-based RBAC delegations.
• Ensure appropriate access levels are assigned to users and groups based on their roles and responsibilities.
• Review and update access permissions regularly to align with organizational changes.

Service Account Management:

• Create and configure service accounts as required by various applications and services.
• Ensure service accounts adhere to security best practices, including the use of strong passwords and limited privileges.
• Monitor and audit service account usage to detect any anomalies or misuse.

Support and Collaboration:

• Provide secondary support to other team members for AD-related dependencies.
• Collaborate with IT staff to ensure seamless integration of AD services with other enterprise systems.
• Document processes and procedures related to endpoint policy management and AD configurations.

Intune Familiarity:

• Gain and maintain familiarity with Microsoft Intune to support future migrations and enhancements.
• Work alongside our Intune team to ensure a smooth transition and integration of Intune services.

Qualifications:

Required:

• Active Secret clearance.
• 10+ Years of relevant experience (Bachelor’s Degree in applicable field may be substituted for 5 years of experience).
• Minimum of 5 years of experience in Active Directory administration, with a strong focus on endpoint policy management and security hardening.
• Must be proficiency in Microsoft Active Directory and Group Policy management.
• Strong understanding of AD Sites and Services and its configuration.
• Experience with role-based access control (RBAC) and security group management.
• Knowledge of endpoint security best practices and compliance standards.
• Excellent problem-solving and troubleshooting skills.
• Strong communication and collaboration abilities.
• Familiarity with Microsoft Intune (expertise not required).

• Willingness to stay updated with the latest cybersecurity trends and emerging security tools.
• Required DoD 8140 compliant certification such as CompTIA Security+

Desired:

• ServiceNow integrated workflows/automation
• Microsoft Federation Services
• Advanced PowerShell scripting or prior software development experience
• DoD PKI

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is: