Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 13 hours ago

Active Directory / Identity Engineer (Senior)

Computer World Services Corp. (CWS)62 open roles

Pay
$135,000 – $175,000 a year
Where
North Chicago, IL
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowActive Directory / Identity Engineer (Senior)Computer World Services Corp. (CWS) · North Chicago, IL

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Computer World Services Corp. (CWS)'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.4% of postings close within 7 days. Measured by our own scanner across the market. Computer World Services Corp. (CWS) postings stay open a median of 57 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.4%7 days
  4. 20.0%14 days
  5. 35.5%30 days
  6. 58.6%60 days
This job: posted 13 hours ago

Computer World Services Corp. (CWS) median: 57 days open

The posting

Computer World Services, Corp. (CWS) seeks a Senior Active Directory / Identity Engineer to own and sustain the Microsoft Active Directory Domain Services (AD DS) environment supporting the USMEPCOM ENLIST program. This senior engineering position manages AD objects, organizational units, Group Policy Objects (GPOs), trusts, replication, schema governance, delegated permissions, domain services, and recovery capabilities.

The engineer also evaluates and tests approved Identity, Credential, and Access Management (ICAM) capabilities, including potential Okta integrations. These modernization activities complement, not replace, the need for direct, hands-on AD DS engineering expertise. The engineer works closely with cybersecurity, Service Desk, systems, cloud, network, application, COOP, and Government identity stakeholders.

Key Tasks & Responsibilities

  • Serve as senior technical owner for the USMEPCOM AD DS environment, maintaining the domain, OU, site, trust, and Group Policy plans and related architecture documentation.
  • Install, configure, maintain, troubleshoot, and recover AD DS, and create, modify, disable, and delete authorized users, computers, groups, service accounts, and other directory objects.
  • Design and maintain the OU structure, and manage OU permissions and delegated administration using least-privilege principles, correcting excessive or conflicting access.
  • Develop, test, deploy, and troubleshoot GPOs, including links, inheritance, precedence, security filtering, WMI filters, backups, and recovery; assess changes for security and customer impact before production.
  • Configure, validate, and troubleshoot domain and forest trusts, reviewing direction, transitivity, authentication scope, and name-suffix routing.
  • Maintain AD sites, subnets, site links, and replication topology; troubleshoot replication failures, latency, and lingering objects; and maintain domain-controller health, SYSVOL, DFSR, time sync, AD-integrated DNS, and FSMO roles.
  • Plan and execute domain-controller installation, upgrade, demotion, and retirement and transitions to supported AD versions; govern and coordinate controlled schema extensions.
  • Process escalated account, group, and permission changes; troubleshoot authentication, authorization, policy, trust, and replication issues; and improve identity-related Service Desk routing and knowledge content.
  • Provide advanced support during identity and authentication incidents, escalate widespread failures through incident-response procedures, and support root-cause analysis and corrective actions.
  • Develop, maintain, and test AD backup, authoritative and non-authoritative restoration, deleted-object recovery, and forest-recovery procedures, and support COOP and disaster-recovery exercises.
  • Support integration testing between AD and Okta or other approved identity platforms, validating synchronization, authentication flows, attribute and group mappings, provisioning, and SAML, OIDC, OAuth, SCIM, or LDAP protocols, and documenting test results.
  • Automate approved directory administration, health validation, and reporting; review audit information; apply DISA STIGs and security baselines; and support RMF controls, POA&M activities, and remediation.
  • Maintain SOPs, recovery plans, configuration baselines, and directory diagrams, and provide directory-service health, risk, and modernization information for program reporting.

Education & Experience

  • Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category.
  • Minimum of eight (8) years of relevant experience in Active Directory engineering, identity engineering, Windows infrastructure, systems engineering, or a related discipline.
  • Direct, hands-on experience engineering and administering Microsoft AD DS in an enterprise environment, including objects, OUs, GPOs, trusts, replication, schema, delegated permissions, and directory recovery.
  • Experience troubleshooting complex authentication, authorization, Group Policy, replication, and trust issues, and planning or supporting AD backup, restoration, and forest recovery.
  • Experience testing identity integrations or supporting identity-modernization activities, with an understanding of the distinction between core AD DS and external ICAM, federation, or cloud-identity services.
  • Strong written, verbal, analytical, and technical problem-solving skills.
  • Experience integrating AD with Okta, and with Microsoft Entra ID or hybrid identity.
  • Experience supporting federal or DoD ICAM initiatives, including CAC, PIV, certificate-based authentication, and PKI.
  • Experience with SAML, OIDC, OAuth, SCIM, LDAP, Kerberos, NTLM, AD FS, or comparable federation technologies.
  • Experience with PowerShell for AD administration and automation.
  • Experience applying DISA STIGs to AD and Windows infrastructure and supporting RMF authorization activities.
  • Familiarity with Zero Trust identity principles and privileged-access, identity-governance, or audit tools.

Certifications

  • Required: None.
  • Preferred: Microsoft identity, Windows Server, or Azure certification; Okta Certified Administrator, Okta Certified Consultant, or comparable; CompTIA Security+, CISSP, or another security certification; ITIL 4 Foundation.

Security Clearance

  • Active Secret clearance or higher is required.

Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.)

  • Remote position; Chicago, IL–area candidates preferred.
  • Occasional after-hours maintenance, COOP exercises, disaster-recovery testing, incident response, on-site support, or travel may be required.

Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations.

Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at [email protected].

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Computer World Services Corp. (CWS)'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Computer World Services Corp. (CWS)'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Computer World Services Corp. (CWS)'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.