Address
Form of workEmpower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have. The result is a government workforce that is exponentially more creative and productive. For more information, visit www.Empower.ai.
Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company's commitment to hiring and supporting active-duty and veteran employees.
ResponsibilitiesSUMMARY
DIGIT is seeking an Identity and Directory Management Services (IDMS) Active Directory (AD) Engineer to support the design, administration, management, execution & maintenance of GSA's Identity & Directory Management Services (IDMS) and Identity, Credential, and Access Management (ICAM) solutions to meet the needs of the enterprise users & the enterprise architecture. These services, systems, and capabilities include, but not limited to, directory services management, ICAM, privileged account management, Single Sign-On (SSO), Active Directory (AD) Domain Name System (DNS) services, Public Key Infrastructure (PKI), Multi-Factor Authentication (MFA), auditing and log management, Continuous Diagnostics and Mitigation/Dynamic and Evolving Federal Enterprise Network Defense (CDM/DEFEND), and the management of appliances. GSA IT currently leverages Microsoft (MS) AD as the authoritative account management system.
As a leading provider of advanced information technology solutions and professional services to U.S. federal government agencies, is the prime for a $807m task order in support of the General Services Administration (GSA) Office of Digital Infrastructure Technologies (IDT) DIGIT (Digital Innovation for GSA Infrastructure Technologies) task order driving digital transformation and delivering continuous improvement and business value to its customers. The team is comprised of the best-in-class technology partners to leverage forward-leaning technologies and best practices to transform GSA's IT capabilities and shift offerings to provide a more flexible service delivery model, completing the agency's shift to a fully digital experience along with its adoption of advanced, emerging technologies such as intelligent automation, artificial intelligence, and machine learning.
RESPONSIBILITIES
This position shall perform the following (to include but not limited to) activities:
- Active Directory including but not limited to:
- Microsoft Active Directory
- Azure Active Directory
- NetIQ DRA
- NetIQ Group Policy Administrator (GPA)
- Active Directory Lightweight Directory Services
- Vulnerability Mitigation
- Hands-on experience with cloud computing services (O365/Microsoft Azure/AWS).
- Experience with network architecture.
- Powershell, java and .NET scripting.
- An understanding of Zero Trust concepts.
- Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services.
- Monitoring and maintaining the Service Now ticketing system
- Strong communication skills with customers over phone, email, or ticketing system.
- Must be willing to work a variety of shifts, including holidays as scheduled.
- Providing on-call rotation support on a routine basis.
CONTRACT REQUIRED QUALIFICATIONS
This following are REQUIRED for this position:
- Public Trust Clearance by start date.
- ITILv4 Foundation Training and ITILv4 Foundation Certification, may be obtained within 120 days after hire.
- Expertise in Powershell, java and .NET scripting.
- Considered Senior Active Directory Engineer.
- Applies fundamental concepts, processes, practices, and procedures on technical assignments. Performs work that requires practical experience and training. Work is performed under supervision.
- Proven ability to work independently in a full and/or partial remote environment with limited supervision and may supervise/lead others.
- Possess the ability to communicate in both oral and written forms, demonstrating an ability to communicate effectively with all levels of staff as well as clients.
- Maintain standard working hours per the DIGIT contract and to be available for meetings, and other collaborative efforts during working hours.
- Demonstrated ability to apply comprehensive knowledge across key tasks and high impact assignments with the ability to use practical experience and training to determine how to accomplish tasks.
CONTRACT DESIRED QUALIFICATIONS
The following are DESIRED for this position:
Strong knowledge of the different identity and access management (IAM) concepts, technologies and authentication protocols.
- Public Key Infrastructure (PKI):
- Active Directory Certificate Services (AD CS).
- HID Credential Management System (CMS).
- HID ActivClient.
- Federal PIV/CAC.
- Safenet Hardware Security Module (HSM's).
- Identity Management services operations including but not limited to
- SailPoint IdentityIQ
- SecureAuth
- SAML 2.0
- Forefront Identity Manager/Microsoft Identity Manager
- Active Directory Federation Services
- Proficiency in the Google Suite (Gmail, Calendar, Chat, Meet, Docs, Slides, Sheets), Slack, and ServiceNow.
- Must be willing to work a variety of shifts, including holidays as scheduled.
EDUCATION AND EXPERIENCE
The following are the education and experience required for this position:
- 7 - 12 years of experience and bachelor's degree
- Experience as a remote worker demonstrating time management and self discipline with cultural change management and Agile mindset.
PHYSICAL REQUIREMENTSThe physical demands described below are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to do the following:
- If remote, maintain home workspace in a safe manner, free from safety hazards and in line with information security policies.
- Communicate verbally in person, over the phone or by video chat and clearly/succinctly in writing, primarily utilizing a keyboard.
- Appear on camera for meetings with co-workers and government partners via video chat and ensure the protection of proprietary company and customer information is consistent with the company's expectation of information security.
- Viewing computer screens and sitting for long periods of time.
About Empower AI
It is the policy of Empower AI to provide equal opportunity in recruiting, hiring, training, and promoting individuals in all job categories without regard to race, color, religion, national origin, gender, age, disability, genetic information, veteran status, sexual orientation, gender identity, or any other protected class or category as may be defined by federal, state, or local laws or regulations. In addition, we affirm that all compensation, benefits, company-sponsored training, educational assistance, social, and recreational programs are administered without regard to race, color, religion, national origin, gender, age, disability, genetic information, veteran status, sexual orientation, or gender identity. It is our firm intent to support equal employment opportunity and affirmative action in keeping with applicable federal, state, and local laws and regulations. Empower AI is a VEVRAA Federal Contractor.
Employment Type: FULL_TIME
