U.S. Citizen with an Active DoD Secret security clearance.
Bachelor's degree in a related field or equivalent experience (5+ years) or High School Diploma with 9+ years of relevant experience.
Ability to obtain DoD 8140 IAT Level II Security+ (or higher) within 60 days of hire.
Experience administering Microsoft Active Directory Domain Services and Windows Server in production environments.
Strong knowledge of DNS, Group Policy, and domain controller management.
Responsibilities
Administer and maintain cloud-hosted Active Directory Domain Services and Windows Server environments in Azure and AWS.
Design and support identity integrations among Active Directory, Microsoft Entra ID, AWS services, Keycloak, and AppGate.
Manage directory objects, organizational units, group policy, DNS, domain controllers, trusts, and access controls.
Automate routine administration and configuration using PowerShell and infrastructure-as-code tools.
Monitor directory and Windows services for availability, performance, security events, and capacity.
Benefits
Collaborative work environment with cross-functional teams.
Opportunities for career growth and professional development.
Focus on innovative solutions to complex problems.
Engagement in high-energy, demanding projects.
Support for obtaining necessary security certifications.
Full Job Description
Everforth ECS is seeking a Cloud Systems Engineer - Active Directory and Windows to work in our Fairfax, VA office
Everforth ECS is seeking a Cloud Systems Engineer - Active Directoryand Windows to join a team responsible for managing and maintaining multiple network enclaves to support the DoD community. A successful candidate will design, operate, Active Directory and Windows OS and improve identity and Windows Server services in a Multi-cloud environment spanning Microsoft Azure and Amazon Web Services (AWS). This engineer will support cloud-hosted directory services, Windows workloads, and integrations with Multiple Microsoft Azure and AWS cloud environments. The role focuses on secure, reliable operations and automation across both cloud platforms. This is a demanding, high-energy position that requires innovative solutions to network, hardware, and software problems. The ideal candidate possesses excellent communication skills; is a motivated, self-starter who enthusiastically tackles operational challenges, and can quickly grasp and implement creative solutions; and is both customer-service and career growth-oriented.
Key Responsibilities:
Administer and maintain cloud-hosted Active Directory Domain Services and Windows Server environments in Azure and AWS.
Design and support identity integrations among Active Directory, Microsoft Entra ID, AWS services, Keycloak, and AppGate.
Manage directory objects, organizational units, group policy, DNS, domain controllers, trusts, and access controls.
Build, configure, patch, harden, and troubleshoot Windows Server and desktop workloads.
Implement and maintain identity lifecycle, authentication, authorization, and privileged access controls.
Monitor directory and Windows services for availability, performance, security events, and capacity.
Automate routine administration and configuration using PowerShell and infrastructure-as-code tools.
Apply security baselines, vulnerability remediation, logging, and audit requirements to Windows and directory services.
Develop backup, recovery, and business continuity procedures for directory services and Windows workloads.
Collaborate with cloud, security, and application teams to plan changes, resolve incidents, and support deployments.
Maintain technical documentation, operational procedures, diagrams, and change records.
Other duties, as assigned.
Salary: $130,000-165,000
General Description of Benefits
U.S. Citizen.
Active DoD Secret security clearance.
Bachelors in a related field of study and 5+ years of experience. Alternatively, High School Diploma and 9+ years of relevant experience.
Ability to obtain DoD 8140 IAT Level II Security+ (or higher) within 60 days of hire.
Experience with the following:
Administering Microsoft Active Directory Domain Services and Windows Server in production environments.
Microsoft Entra ID, including synchronization or identity integration concepts, single sign-on, enterprise applications, and conditional access.
PowerShell scripting for administration and automation.
Building, maintaining, patching, and versioning standardized Windows operating system images for cloud deployments, including AWS AMIs and custom Azure virtual machine images.
Applying DoD Security Technical Implementation Guides (STIGs) to Windows Server images and workloads, validating compliance, remediating findings, and documenting approved exceptions.
Designing, deploying, and maintaining Azure Virtual Desktop (AVD) environments, including host pools, session hosts, application groups, workspaces, and user access.
Managing AVD session host images, including image creation, updates, patching, testing, and deployment.
Documenting technical procedures and participating in incident and change management.
Strong knowledge of:
DNS, Group Policy, domain controller management, directory replication, OU Design, Site Design, authentication, and access management.
Networking concepts relevant to cloud-hosted directory services, including VPCs or virtual networks, routing, firewalls, and name resolution.
Hands-on experience with:
Supporting Windows workloads in at least one major cloud platform: Azure or AWS.
FSLogix profile containers and troubleshooting user profile, sign-in, and session issues.
Ability to:
Troubleshoot identity, authentication, Single Sign-on, Windows operating systems, and connectivity issues.
Monitor and troubleshoot AVD performance, availability, capacity, and user experience; experience configuring autoscaling or host-pool scaling is preferred.
Knowledge of AVD identity, access, and networking requirements, including Microsoft Entra ID, Active Directory integration, role-based access control, and connectivity to required services.
Strong communication skills and the ability to work across infrastructure, security, and application teams.
Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).
About ECS
ECS is a leading provider of digital solutions and services to the federal government. The company was founded in 2001 by Roy Kapani and has since grown to become a trusted partner to a wide range of government agencies. ECS offers a broad range of services, including cloud computing, cybersecurity, and artificial intelligence. The company has been recognized for its innovative solutions and has won numerous awards, including the AWS Public Sector Partner of the Year award.
