Domain Services Engineer Job at General Dynamics Information Technology, Virginia

bzgwTFBKRkU5Y01UM0JMTitwc0h5b29hTXc9PQ==
  • General Dynamics Information Technology
  • Virginia

Job Description

Public Trust: None
Requisition Type: Regular
Your Impact

Own your opportunity to serve as a critical component of our nation’s safety and security. Make an impact by using your expertise to protect our country from threats.

Job Description

GDIT is seeking a Domain Service Engineer to support the planning, building, and operations of a large, globally accessed, hybrid cloud computing system. The Domain Services Engineer provides support, implementation, and design services for ISE and Microsoft Active Directory and Windows-based systems across the enterprise, including directory and identity management solutions.

We are looking for an individual who will serve as our internal Domain Services team  a broad scale of technologies, working with 802.1X network access control using Cisco Identity Services Engine (ISE), while simultaneously taking ownership of our core DDI (DNS, DHCP, and IPAM) services. Beyond day-to-day administration and Tier 3 engineering, this individual will play a vital role in designing, modernizing, and documenting system-level architectures to ensure our hybrid on-premises and cloud infrastructures are highly available, secure, and scalable. The ideal candidate will be a motivated self-starter with excellent written and verbal communication skills, who exceeds as an individual, as well as excels among peers in a team environment.

Job Duties include but are not limited to:

•Accountable for the management, uptime, and lifecycle of the organization’s 802.1x  architecture.

•Deliver and implement a secure, scalable, and resilient Active Directory design, following industry best practices while adhering to Information Security standards.

•Provide SME level assistance and escalation support for all troubleshooting tasks related to DNS, DHCP, and AD, including but not limited to integration with Windows and non-Windows endpoints, authentication, role-based access controls, DNS, DHCP, etc.

•Manage the environment proactively, anticipating risks and issues, designing and engineering for resiliency. Take technical ownership of projects and systems accordingly.

•Facilitate the implementation of Group Policy Objects (GPO) based on stated requirements. Troubleshoot and resolve any GPO related issues that arise.

•Monitor and identify replication interruptions between domain controllers, DNS and DHCP Server configurations.

•Management of the Public Key Infrastructure (PKI) systems and certificates.

REQUIRED QUALIFICATIONS:

5+ years of experience in progressive roles from Active Directory Administrator to Sr. Engineer

Knowledge of at least scripting languages (e.g. Powershell, Python, Bash, or Perl).

In Depth understanding of Active Directory or LDAP authentication and administration.

Advanced familiarity with enterprise directory synchronization tools such as Azure Active Directory Connect, Cisco Directory Synchronization, or others.

  • Implement and Manage enterprise-wide architecture, deployment, and ongoing administration of Cisco ISE
  • Maintain advanced network access control (NAC) policies, utilizing 802.1X, MAC Authentication Bypass (MAB), and Web Authentication.
  • Act as a Tier 3 escalation point for complex 802.1X/RADIUS authentication issues, certificate mismatches, and supplicant-side issues across Windows, macOS, Linux, and IoT devices.

PREFERRED QUALIFICATIONS:

1. An analytic mindset with the ability to define complex infrastructure problems, correlate logs across multiple systems (ISE, AD, DNS, Network Switches), and execute systematic resolutions.

2. Someone who looks beyond immediate triage to design architectures that prevent future systemic failures.

3. A strong capability to translate highly technical concepts to non-technical business stakeholders, and collaborate across siloed Network, Systems, and Security teams.

4. Configure and optimize network device profiling, Cisco TrustSec (Security Group Tags), and Comply-to-Connect (C2C) architectures.

5. Integrate Cisco ISE with Active Directory, Azure AD/Entra ID, PKI/Certificate Authorities, and SIEM tools for automated threat containment and compliance reporting.

6. Evaluate existing infrastructure pipelines and propose architectural modernizations to leverage Zero Trust Network Architecture (ZTNA), automation, and hybrid-cloud capabilities.

7. Architect, document, and present system-level designs that integrate on-premises systems, virtualization platforms, and public/private cloud environments.

8. Experience working in a fast tempo government agency production IT environment.

9. Experience troubleshooting various Microsoft Windows Server platforms' roles and features.

Location: Customer Site / NGA Washington or NGA St. Louis

US Citizenship Required 

GDIT IS YOUR PLACE
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
● Growth: AI-powered career tool that identifies career steps and learning opportunities
● Support: An internal mobility team focused on helping you achieve your career goals
● Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
● Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY
Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.

#RoverGSS

Work Requirements

Years of Experience

5 + years of related experience

* may vary based on technical training, certification(s), or degree

Certification

Travel Required

None

Citizenship

U.S. Citizenship Required

Job Tags

Immediate start

Similar Jobs

River Link Hotels

Accounts Payable Specialist Job at River Link Hotels

 ...and timely processing of vendor invoices, payments, and related accounting activities. This role is ideal for someone who enjoys working...  ...to vendor inquiries professionally Reconcile accounts payable transactions and assist with month-end close activities Investigate... 

Joe Rizza Ford Lincoln

Customer Service delivery driver Job at Joe Rizza Ford Lincoln

As a Customer Service delivery driver at Joe Rizza Ford Lincoln, you will be responsible for safely transporting customers' vehicles between the dealership and their homes or workplaces. Your role is essential in ensuring a seamless and positive customer experience by handling... 

Heritage Hotels & Resorts Corporate Office

Security Officer Job at Heritage Hotels & Resorts Corporate Office

Description: Heritage Companies is growing our Security team, and were looking for dependable & professional Security Officers to join us at multiple locations throughout Albuquerque. Heritage will pay for your Level 1 Guard Card and additional required certifications... 

NYC Health + Hospitals/South Brooklyn Health

Anesthesiologist Job at NYC Health + Hospitals/South Brooklyn Health

 ...Description Physician Affiliate Group of New York (PAGNY)is adding a Anesthesiologist to the group at NYC Health + Hospitals/South Brooklyn Health . South Brooklyn Health is a redesigned health care campus featuring the new 11-floor Ruth Bader Ginsburg Hospital... 

Med Source Consultants

Psychiatric Nurse Practitioner - 4273 Job at Med Source Consultants

 ...Psychiatric Nurse Practitioner 4273100% Outpatient position Seeing Adolescents and Young Adults ~ We have a need for an experienced Psychiatric Nurse Practitioner just outside Dallas. ~ Join a progressive organization that seamlessly integrates general medicine...