Active Directory Administrator - 3535

Metro Systems, Inc. is in search of an Intermediate level Active Directory Administrator to join our client’s team in Carson, CA or Boston, MA. 


The successful candidate for this position will:

• Conduct Windows server administration to include STIG compliance including checklists, SCAP Scanning, and resolving ACAS Scanning vulnerabilities.

• Perform monthly system maintenance tasks such as patching of servers and resolve vulnerabilities as needed.

• Create and modify PowerShell scripts as needed to streamline the process with some Active Directory functions.

• Schedule, install and test system software upgrades for Domain Controllers and Member Servers within environment.

• Provide and maintain a robust and resilient infrastructure for DCMA's authorization and authentication requirements

• Provide advanced troubleshooting of WSUS, DNS, DHCP, and IIS

• Maintain and support the integrity of the Active Directory environment and various computer systems.

• Function as part of the Active Directory team regarding AD issues to messaging administrators, programmers, web developers, network security engineers, database analysts, field services technicians, network managers, and implementation teams

• Build and maintain partnerships with agency and Active Directory support clients

• Develop, implement and update disaster recovery plans for supported systems 


Basic Qualifications

  • Must possess at minimum current Active Secret Clearance
  • DoD 8570 Compliance to include current CompTIA Security +CE with expiration date no less than 6 months.
  • DoD 8570 Compliance with current Vendor Certifications (Microsoft). Preferably MCSE or MCSA.
  • Strong Active Directory background, and demonstrated success in this area in previous work
  • Have the ability to resolve TIER III level tickets (Master level) within a timely manner based on expertise within Active Directory
  • Intermediate level experience managing a large scale Enterprise environment with multiple Domains.
  • Intermediate level experience troubleshooting server issues and diagnosing root cause of issue
  • Knowledge of virtualization and server consolidation using VMware Virtual Infrastructure and associated tools.
  • Must have in-depth experience in supporting at an Intermediate Level:
    • Microsoft Active Directory infrastructure, including Hands-on experience administering Microsoft Active Directory
    • 2008/2012 in a multi-site and multi-domain organization
    • Microsoft WSUS infrastructure
    • ADFS infrastructure
    • DNS infrastructure
    • AD Replication
  • Must have in-depth knowledge of Group Policies to include WMI Filtering and understanding the importance of Precedence within them.
  • Intermediate level experience with Terminal Server (TS) Technology and licensing.
  • Must have an understanding of PKI Infrastructure to include DoD Certs and ADFS Infrastructure
  • Intermediate level experience with PowerShell scripts with the ability to create and modify scripts as needed within environment.
  • Must be able to assess and review Enterprise server infrastructure, and take proactive measures to ensure continued stability, and assist in the development and/or revision of server based standards, guidelines and policies as determined by internal stake holders
  • Must be able to Troubleshoot with minimum guidance to resolve issues with servers, server operating system and software, including experience troubleshooting issues in a high availability production environment, load balancers, disaster recovery and encryption
  • Strong working knowledge of standards and protocols: TCP/IP, DNS, DHCP, WINS, SMTP, RPC, HTTPS; including knowledge of forest to forest trusts
  • Scripting expertise on Windows Server 2008 – 2012 as well as knowledge of IIS and networking concepts, VPN’ s, etc.
  • Must be willing to work on call and after hours to support Operations worldwide.
  • Maintain and understand systems, regulatory requirements, and security of hosting systems
  • Develop, document and participate in system disaster recovery tests, in accordance with DCMA policy, on a quarterly basis to ensure data integrity and availability
  • Keep abreast of current developments in server technology to assist Federal staff in assessing the future direction of server technology
  • Knowledge of active directory concepts and configuration security groups, inherited rights, delegation, OU structure, object types and attributes
  • Ability to create and manage Group Policies including GPO precedence, enforcement and blocking
  • Work successfully in a large team environment, with individual accountability

Desired Skills

  • Familiarity with Microsoft PowerShell scripting
  • Preferred knowledge in domain migrations & consolidation
  • Ability to work in a team environment with little to no supervision
  • Excellent communication skills in order to be able to participate in customer meetings
  • Familiarity with BatchPatch software a plus 


MSI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or national origin.