ECS is seeking an ICAM Systems Administrator (Top Secret Cleared with CI-Poly) to work in our Washington, DC office.

ECS is seeking skilled and experienced System Administrators to join our organization. We offer the chance to support the world’s finest law enforcement organization and help the people that keep us safe. In this role, you will support agents, analysts, professionals, and the technology they use to combat terrorism, espionage, cyber-attacks, and major criminal threats. We have multiple positions available across different teams, including Unified Collaboration, ICAM, and Credentials.

As a System Administrator, you will be responsible for providing operational support to enterprise email and communication enabled business processes to include instant messaging, voice – and - video calling, and ad-hoc – and - structured conferences. Support for these tools is across multiple enclaves, Unclassified, Secret, and Top Secret/SCI networks.

Day to day work may include:

• Responding to service requests from the end-user, other IT professionals, and executive management.
• Performing routine monitoring, maintenance, and administration of application servers.
• Implementing database changes in response to changes in the customer’s enterprise computing environment, such as new versions and releases of application software, the introduction of new computing hardware, and the virtualization of computing hardware to host multiple logical servers. At a minimum, the candidate shall be qualified to be a senior level system administrator providing Tier-3 level support.

The candidate shall be proficient in operational support, maintenance, problem - solving, and system administration of enterprise email and communication servers.

Responsibilities:

• Provide guidance regarding changes to the AD schema
• Create and maintain a Group Policy Map to indicate what each group policy does, what resource(s) is (are) affected, and understand the effect of any change to group policy
• Audit changes to accounts, group policy, and other changes to AD with enterprise auditing tools (i.e Dell Active Administrator, Change Auditor, and Recovery Manager).
• Follow the Customer’s Change Management Policy when changing the customer’s IT infrastructure.
• Share knowledge with other members of the full AD team, regardless of whether other members are customer employees or contractors of this or another contractor.
• Provision, modify, and deprovision user and administrator accounts on the four (4) enclaves upon receipt of approved access or deprovisioning request, based upon location, role, or both.
• Make necessary adjustments to security controls to grant only access to IT resources required for job performance.
• Support personnel moves by migrating user profiles and data to data stores associated with new location.
• Follow the customer’s policy and procedures for account management to create, modify, or delete accounts and account permissions.
• Incident and problem resolution
• Documentation creation and updates. Operations and support.
• Manage and maintain standardized Organizational Units (OU) in AD
• Manage and maintain AD custom attributes and security groups
• Manage AD sites and subnets, including site replication
• Manage and maintain group policy, and scripts associated with group policy, to secure the IT infrastructure and grant necessary resources to staff, consistent with job requirements (i.e. workstation, server, common Microsoft products such as Exchange, SharePoint and other group policies as requested)
• Manage the AD database, System Volume (SYSVOL).
• Monitor Domain Controllers to prevent outages and/or restore service in a timely manner, analyze the policies currently monitored, and make recommendations as needed to provide meaningful alerts for action.
• Maintain a listing of all service accounts, the applications and servers which use them, and the unit responsible for the accounts.
• Manage user profiles, including access to share drives, OU assignment, password reset, and general directory cleanup at regular intervals.
• Manage and maintain delegation of permissions.
• System monitoring (using HP Operations Manager for Windows, Replication Administrator, Dell Active Administrator, ScriptLogic, Microsoft NetMon, Change Auditor, and Recovery Manager);
• Software patching (security and functional updates)
• Minor software upgrades

Position is 100% on site.

Salary Range: $90,000 - $120,000

General Description of Benefits

5+ years of experience and functional knowledge of the following:

• Proven experience as an Active Directory Administrator in a large enterprise environment.
• In-depth knowledge of Active Directory architecture, design, and implementation.
• Strong understanding of Windows Server operating systems and associated technologies.
• Proficiency in PowerShell scripting for task automation and management.
• Experience with Group Policy management and troubleshooting.
• Knowledge of security best practices and the ability to implement security measures within Active Directory.
• Familiarity with backup and recovery solutions for Active Directory.
• Excellent communication and collaboration skills.
• Resolve Windows operating system related issues and provide technical advice;
• Ensure updates are happening on a regular basis;
• You will be responsible for not only development but delivery of these processes;
• Comfortable being called into to resolve complex AD (active directory) infrastructure problems;
• Deep support of existing active directory modules is needed;
• Work with technical management, peers and consumers.
• Relevant certifications such as Microsoft Certified: Azure Administrator Associate or Microsoft Certified: Identity and Access Administrator Associate are a plus.