Microsoft Active Directory SME

Position Title: Microsoft Active Directory SME
Position Type: Onsite
Location: Annapolis Junction, MD
Clearance: TS/SCI
The Microsoft Active Directory Subject Matter Expert (SME) will support enterprise infrastructure initiatives. This individual will lead the architecture, design, deployment, and ongoing operations of Microsoft AD services, including Azure Active Directory, Group Policy, Identity Federation, and associated authentication systems. The ideal candidate will bring deep expertise in AD forest design, domain consolidation, AD hardening, and security best practices, with a strong focus on enterprise-scale environments.

Responsibilities:

• Serve as the technical authority on all matters related to Microsoft Active Directory and identity services.
• Design, implement, and manage scalable and secure AD infrastructures (on-premises and cloud hybrid).
• Oversee AD migrations, upgrades, domain consolidation, and forest restructuring.
• Develop and enforce AD-related security policies and standards, including privileged access management.
• Manage integration with Azure AD, ADFS, MFA, SSO, and conditional access policies.
• Collaborate with cybersecurity teams to strengthen identity security posture.
• Conduct regular AD health checks, performance tuning, and troubleshooting.
• Document architecture, configurations, operational procedures, and support guides.
• Provide mentoring and training to junior team members and IT support staff.

Requirements:

• Experience managing enterprise Active Directory environments.
• Expert knowledge of:
  • AD DS (Domain Services), DNS, DHCP, and Group Policy
  • Azure Active Directory, AD Connect, and Hybrid Identity solutions
  • ADFS, LDAP, Kerberos, NTLM authentication
• Strong PowerShell scripting and automation skills.
• Experience with Zero Trust principles and identity governance tools.
• Familiarity with ITIL-based service management and change control.
• Experience in software engineering and integration of Commercial Off-the-Shelf software products
• Must have a current DoD 8570.1-M/8140 IAT Level III certification

Desired:

• ITIL Foundations certification desired
• Microsoft Certified: Identity and Access Administrator Associate or similar.
• Experience with Microsoft Entra, MIM (Microsoft Identity Manager), or Okta.
• Previous experience in regulated environments (e.g., financial, healthcare, or government).