Active Directory / Identity Engineer (Journeyman)

Computer World Services, Corp. (CWS) seeks an Active Directory / Identity Engineer to administer, sustain, secure, and recover the Microsoft Active Directory Domain Services (AD DS) environment supporting the USMEPCOM ENLIST program. This position manages AD objects, organizational units, Group Policy Objects (GPOs), trusts, replication, schema changes, delegated permissions, domain services, and recovery capabilities. The engineer also assists with testing of approved Identity, Credential, and Access Management (ICAM) capabilities, including potential Okta integrations. These modernization activities complement, not replace, the need for direct, hands-on AD DS engineering expertise. The engineer works closely with cybersecurity, Service Desk, systems, cloud, network, application, COOP, and Government identity stakeholders. Key Tasks & Responsibilities Install, configure, maintain, troubleshoot, and recover AD DS, and create, modify, disable, and delete authorized users, computers, groups, service accounts, and other directory objects. Implement and maintain the OU structure, and manage OU permissions and delegated administration using least-privilege principles, correcting excessive or conflicting access. Develop, test, deploy, and troubleshoot GPOs, including links, inheritance, precedence, security filtering, WMI filters, backups, and recovery; assess changes for security and customer impact before production. Configure, validate, and troubleshoot domain and forest tru