Cloud Systems Engineer – Active Directory and Windows

Everforth ECS is seeking a Cloud Systems Engineer – Active Directory and Windows to work in our Fairfax, VA office.

Everforth ECS is seeking a Cloud Systems Engineer – Active Directory and Windows to join a team responsible for managing and maintaining multiple network enclaves to support the DoD community.  A successful candidate will design, operate, Active Directory and Windows OS and improve identity and Windows Server services in a Multi-cloud environment spanning Microsoft Azure and Amazon Web Services (AWS). This engineer will support cloud-hosted directory services, Windows workloads, and integrations with Multiple Microsoft Azure and AWS cloud environments. The role focuses on secure, reliable operations and automation across both cloud platforms.  This is a demanding, high-energy position that requires innovative solutions to network, hardware, and software problems. The ideal candidate possesses excellent communication skills; is a motivated, self-starter who enthusiastically tackles operational challenges, and can quickly grasp and implement creative solutions; and is both customer-service and career growth-oriented.

Key Responsibilities: 

• Administer and maintain cloud-hosted Active Directory Domain Services and Windows Server environments in Azure and AWS.
• Design and support identity integrations among Active Directory, Microsoft Entra ID, AWS services, Keycloak, and AppGate.
• Manage directory objects, organizational units, group policy, DNS, domain controllers, trusts, and access controls.
• Build, configure, patch, harden, and troubleshoot Windows Server and desktop workloads.
• Implement and maintain identity lifecycle, authentication, authorization, and privileged access controls.
• Monitor directory and Windows services for availability, performance, security events, and capacity.
• Automate routine administration and configuration using PowerShell and infrastructure-as-code tools.
• Apply security baselines, vulnerability remediation, logging, and audit requirements to Windows and directory services.
• Develop backup, recovery, and business continuity procedures for directory services and Windows workloads.
• Collaborate with cloud, security, and application teams to plan changes, resolve incidents, and support deployments.
• Maintain technical documentation, operational procedures, diagrams, and change records.
• Other duties, as assigned.

Salary: $130,000-165,000

General Description of Benefits 

• U.S. Citizen.
• Active DoD Secret security clearance.
• Bachelors in a related field of study and 5+ years of experience. Alternatively, High School Diploma and 9+ years of relevant experience.
• Ability to obtain DoD 8140 IAT Level II Security+ (or higher) within 60 days of hire.
• Experience with the following:
  • Administering Microsoft Active Directory Domain Services and Windows Server in production environments.
  • Microsoft Entra ID, including synchronization or identity integration concepts, single sign-on, enterprise applications, and conditional access.
  • PowerShell scripting for administration and automation.
  • Building, maintaining, patching, and versioning standardized Windows operating system images for cloud deployments, including AWS AMIs and custom Azure virtual machine images.
  • Applying DoD Security Technical Implementation Guides (STIGs) to Windows Server images and workloads, validating compliance, remediating findings, and documenting approved exceptions.
  • Designing, deploying, and maintaining Azure Virtual Desktop (AVD) environments, including host pools, session hosts, application groups, workspaces, and user access.
  • Managing AVD session host images, including image creation, updates, patching, testing, and deployment.
  • Documenting technical procedures and participating in incident and change management.
• Strong knowledge of:
  • DNS, Group Policy, domain controller management, directory replication, OU Design, Site Design, authentication, and access management.
  • Networking concepts relevant to cloud-hosted directory services, including VPCs or virtual networks, routing, firewalls, and name resolution.
• Hands-on experience with:
  • Supporting Windows workloads in at least one major cloud platform: Azure or AWS.
  • FSLogix profile containers and troubleshooting user profile, sign-in, and session issues.
• Ability to:
  • Troubleshoot identity, authentication, Single Sign-on, Windows operating systems, and connectivity issues.
  • Monitor and troubleshoot AVD performance, availability, capacity, and user experience; experience configuring autoscaling or host-pool scaling is preferred.
• Knowledge of AVD identity, access, and networking requirements, including Microsoft Entra ID, Active Directory integration, role-based access control, and connectivity to required services.
• Strong communication skills and the ability to work across infrastructure, security, and application teams.
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).