Akima · 1 week ago
Enterprise Directory Services - Remote
United States
Full-time
Remote
Senior Level
$140K/yr - $155K/yr
7+ years expAkima is a federal lifecycle solutions contractor that supports shareholder communities in Alaska. The Enterprise Directory Services SME is responsible for providing technical leadership in designing, implementing, and maintaining directory services infrastructure to ensure secure and reliable identity management across the USCIS enterprise.
ConstructionConsultingCyber SecurityInformation TechnologyLogisticsManagement ConsultingSupply Chain ManagementTechnical Support
No H1B
Security Clearance RequiredU.S. Citizen Only
Responsibilities
Lead the design, administration, and optimization of enterprise directory services (e.g., Microsoft Active Directory, AD FS, AD LDS, LDAP directories, Azure AD, hybrid directory environments)
Oversee directory service operations: domain/forest architecture, tree structure, schema design, group policy, domain controllers, replication, global catalog, trust relationships, DNS/DHCP integration
Manage identity lifecycle integration: onboarding/offboarding, account provisioning/deprovisioning across enterprise applications leveraging directory services
Ensure high availability, disaster recovery, redundancy, and fault tolerance for directory services
Troubleshoot and resolve complex directory service issues: authentication problems, replication failures, trust issues, group policy conflicts, schema extensions, latency, performance bottlenecks
Lead modernization and migration initiatives (e.g. domain/forest consolidation, directory upgrades, cloud integration, directory as a service, or moving parts of identity to Azure AD or hybrid cloud)
Architect and enforce security standards for directory services: least privilege, secure administrative practices, privileged access management, hardening of domain controllers, role separation, logging and auditing
Collaborate with Security, IAM/ICAM/Identity teams, Network, Infrastructure, Application, and Cloud teams to integrate directory services with broader enterprise identity and access management, authentication/authorization systems, SSO, MFA, certificate services etc
Maintain documentation: directory topology, policies, procedures, standard operating procedures (SOPs), emergency recovery plans, schema change management, configurations
Provide expert guidance on directory-sizing, capacity planning, patching/upgrades, and domain controller life cycle management
Support compliance efforts with NIST, FISMA, DHS policies, and any USCIS / federal mandates relevant to identity and directory services
Mentor junior directory administrators and engineers; provide knowledge transfer
Participate in architecture review boards, change control boards for any changes to directory services
Qualification
Required
U.S. Citizenship; must satisfy DHS/USCIS suitability or security clearance requirements
Bachelor's degree (Computer Science, Information Systems, Cybersecurity, or related field). Advanced degree a plus
Substantial experience (often 7-12+ years) working with directory services in large, complex enterprise environments
Deep expertise in Microsoft Active Directory (AD DS), AD FS, AD LDS, Azure AD/Azure AD Connect, hybrid directory infrastructures
Strong knowledge of group policy design, DNS, domain/forest functional levels, replication and trust relationships
Experience with schema management, directory upgrades, migrations, forest/domain consolidations
Proven experience securing directory services: hardening domain controllers, applying patches, managing privilege elevation, auditing/logging
Good scripting/automation skills (PowerShell, etc.) to manage directory tasks, monitoring, maintenance, and deployments
Strong analytical/problem-solving and troubleshooting skills
Excellent communication skills, both technical and non-technical; ability to produce documentation and briefing materials
Preferred
Certifications such as Microsoft Certified: Identity and Access Administrator, MCSA/MCSE, or equivalent
Experience with third-party directory or identity services tools (e.g. LDAP systems, non-Microsoft directories)
Hands-on experience with cloud-based directory and identity services (Azure AD, AWS Directory Service, etc.)
Experience integrating directory services with application authentication (SSO, OAuth, SAML, etc.)
Benefits
Medical
Dental
Vision
Life insurance
401(k)
Paid Time Off (PTO)
Company
Akima
Akima focuses on delivering services in the areas of logistics, IT, supply chain, systems engineering, construction and protective services.
5001-10000 employees
Funding
Current Stage
Late StageLeadership Team
Chris Jenkins
Group President
Michael Alvarado
Chief Growth Officer
Recent News
Providence Business News
2025-12-31
Huntsville/Madison County Convention & Visitors Bureau
2025-10-23
Company data provided by crunchbase