Active Directory / Identity Engineer (Senior)

Overview DecisionPoint seeks an Active Directory / Identity Engineer to own and sustain the Microsoft Active Directory Domain Services environment supporting the USMEPCOM ENLIST program. This senior engineering position manages AD objects, organizational units, Group Policy Objects, trusts, replication, schema governance, delegated permissions, domain services, and recovery capabilities. The Active Directory / Identity Engineer ensures that directory services remain secure, available, recoverable, and aligned with USMEPCOM operational and cybersecurity requirements. The engineer supports domain and forest planning, account and group administration, site replication, trust relationships, Group Policy, domain-controller lifecycle activities, backup, restoration, and modernization. The position also evaluates and tests approved Identity, Credential, and Access Management capabilities, including potential Okta integrations and other identity-modernization technologies. These modernization activities complement—not replace—the position’s requirement for direct, hands-on AD DS engineering expertise. The engineer works closely with cybersecurity, Service Desk, systems, cloud, network, application, COOP, and Government identity stakeholders. This position is remote, with Chicago-area candidates preferred. Occasional after-hours maintenance, incident response, COOP exercises, on-site support, or travel may be required. Note: By applying to this position, you acknowledge and consent to