ESM Systems Engineer III - Secret Clearance

About the Role
The ESM Systems Engineer III is required to be certified at the expert level in multiple disciplines of systems and security (e.g., Azure Solutions Architect, Windows Server Hybrid Administrator, & CISSP) and provides high-level engineering and management support for all Enterprise systems.
ESMs support Enterprise-class infrastructure in the RCC-SWA by providing optimization, administration, and technical documentation of all infrastructure systems. ESMs resolve and complete assigned cases and change requests and act as an escalation point for support issues.
The core infrastructure technology duties include Microsoft Active Directory, Microsoft Entra ID (formerly Azure Active Directory), Microsoft Configuration Manager (formerly System Center Configuration Manager (SCCM) / Microsoft Endpoint Configuration Manager (MECM)), Windows Server Update Services (WSUS), Structured Query Language (SQL), Active Directory Federation Services (ADFS), Microsoft Identity Manager / Forefront Identity Manager (MIM/FIM), Domain Name System (DNS), Online Certificate Status Protocol (OCSP), and Public Key Infrastructure (PKI) system security and Group Policy, PowerShell scripting, and top-level support for enterprise-wide initiatives in a virtualized environment.
The position is a senior role and will mentor other Systems Engineers while serving as the primary support entity for problem escalation, reporting directly to the section team lead. Broad knowledge and expert hands-on experience in a large enterprise are essential for success in this role.
This position offers company-paid housing and transportation, a completion bonus, and a tuition reimbursement program!
*You must satisfy all host country requirements to legally work in the host country to include but not limited to the ability to obtain and maintain a host nation visa and host nation driver’s license in order to be qualified for this position.

Responsibilities

• Provides Enterprise-level support for Active Directory, Microsoft Entra ID (formerly Azure Active Directory), and Windows File Services in an Enterprise environment for global initiatives.
• Performs Problem Management and Root Cause Analysis for Corporate Identity Management in a large-scale Department of Defense setting.
• Serves as an escalation point for application support and troubleshooting, providing guidance and direction in the resolution of escalated issues and complex production, application, or system problems.
• Installs, configures, and maintains Microsoft Active Directory, Microsoft Enterprise tools, and third-party software.
• Coordinates and implements patch management, monthly Windows update deployments process to Servers and Workstations, analyzes SCCM / Intune log files, application packaging and distribution, operating system deployment (OSD), custom reporting using SQL, and creating WQL queries. Creates desktop and server images utilizing technologies such as MDT.
• Creates and maintains system documentation for domain technologies, including installation, configuration, and appropriate troubleshooting steps.
• Improves existing processes through solutions to recurring problems and enhancements to existing solutions or documentation.
• Troubleshoots servers and infrastructure equipment, assesses networking requirements and implements solutions, and makes accurate, independent decisions under pressure.
• Coordinates work and communicates status, issues, and documentation clearly across teams and stakeholders.
• Manages and prioritizes multiple complex tasks simultaneously in a fast-paced, deadline-driven environment.
• Performs other duties and assignments as required.

Qualifications

Security Clearance:

• Requires an active Secret Clearance.

Education / Certifications:
One-year related experience can be substituted for one year of education if the degree is required.

• Bachelor’s Degree or equivalent experience preferably in Computer Science or MIS, IS, Engineering or related field.
• This position requires candidates to adhere to DoD 8570.01M. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification.
• The authorized certifications for this job title are listed as follows:

Baseline:

• Cisco: CCNP: Certified Network Professional - Security
• CompTIA: CASP+ ce: Advanced Security Practitioner
• CompTIA: SecurityX ce
• GIAC: GCED: Certified Enterprise Defender
• GIAC: GCIH: Certified Incident Handler
• ISACA: CISA: Certified Information Systems Auditor
• ISC2: CCSP: Certified Cloud Security Professional
• ISC2: CISSP (or Associate): Certified Information Systems Security Professional

Computing Environment (CE):

• Microsoft: 365 Certified: Enterprise Administrator Expert
• Microsoft: Certified: Azure Database Administrator Associate
• Microsoft: Certified: Azure Security Engineer Associate
• Microsoft: Certified: Azure Solutions Architect Expert
• Microsoft: MCSA: Cloud Platform
• Microsoft: MCSA: Windows Server 2012

Experience:
One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree in a Software Engineering or Business Information Systems discipline for three years general experience.

• Minimum of 5 years of experience (10 preferred) in demonstrating the ability and aptitudes required to perform technical, managerial, or analytical work and coordination involving management of Enterprise-level information systems.
• Platforms including a combination of the following:
  • Microsoft Active Directory
  • Microsoft Entra ID (formerly Azure Active Directory)
  • Microsoft Configuration Manager (MCM), formerly System Center Configuration Manager (SCCM) / Microsoft Endpoint Configuration Manager (MECM), Intune, Windows Server Update Services (WSUS)
  • Structured Query Language (SQL)
  • Microsoft Identity Manager / Forefront Identity Manager (MIM/FIM)
  • Active Directory Federation Services (ADFS)
  • Domain Name System (DNS)
  • Public Key Infrastructure (PKI)
  • Azure Virtual Desktop in a Wide Area Network.
• Experience with a customer service-oriented company.

Skills & Technology Used:

• Proficiency in using a computer - desktop or laptop.
• Proficiency in using Microsoft productivity software.
• Proficiency in using Email client software.
• Ability to troubleshoot servers and infrastructure equipment, assess networking requirements and provide solutions, and make accurate and independent decisions under pressure.
• Excellent organizational, interpersonal, written, and verbal communication skills.
• Ability to perform comfortably in a fast-paced, deadline-oriented work environment and to successfully execute many complex tasks simultaneously.
• Ability to install, configure, and maintain Microsoft Active Directory, Microsoft Enterprise tools, and third-party software utilities for hardware systems within operational guidelines.
• Active Directory, Microsoft Entra ID (formerly Azure Active Directory), and Windows Enterprise environment.
• Microsoft Configuration Manager (formerly System Center Configuration Manager (SCCM) / Microsoft Endpoint Configuration Manager (MECM)).
• Ability to analyze SCCM / Intune log files, application packaging, and distribution, operating system deployment (OSD).
• MS Active Directory Domain Services.
• MS Active Directory Certificate Services (AD CS).
• Ability to create and maintain system documentation for domain technologies, including installation, configuration, and appropriate troubleshooting steps.

Work Environment:

• The work environment will be 95% indoors and 5% outdoors.
• The outdoor work environment may exceed temperatures of 100° F. Candidate must be able to physically withstand extreme heat.

Physical Requirements:

• Must be capable of lifting, pushing, and pulling items weighing up to 50 lbs.
• Must be capable of wearing Personal Protective Equipment (helmet and plated vest) which can weigh 25 to 40 lbs, for extended periods of time.

Equal Employment Opportunity
At the company, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients.