Sr Windows System Engineer/SME

Overview

Senior Windows Infrastructure Engineer and subject matter expert for the enterprise Active Directory environment and Azure Active Directory / Microsoft Entra ID cloud integrations, serving as the highest-tier escalation point and setting standards for the team.

What you'll do

• Identify and engineer architecture for identity solutions.
• Manage security and Enterprise Public Key Infrastructure (PKI).
• Design cloud solutions and perform Azure engineering, administration, and optimization.
• Provide Tier 3 engineering and troubleshooting support.
• Govern access and support disaster recovery.
• Drive automation, optimization, and continuous improvement.
• Maintain documentation and compliance.
• Configure, maintain, and upgrade 2019, 2022, and 2025 server operating systems, Microsoft and third-party applications, and physical and virtual servers in FTC datacenters.
• Create, monitor, and drive to resolution change requests and trouble tickets affecting Windows Servers and applications.
• Resolve assigned ServiceNow incident tickets and service requests, including server builds, configuration changes, Windows permissions changes, and file server ACL changes.
• Maintain application services for Symantec Endpoint Protection and Carbon Black Protection (servers), DNS/DHCP updates, and Active Directory including Group Policy Objects.
• Draft SOPs and technical documentation and present designs, plans, courses of action, and analyses of alternatives to technical leadership and boards.

What you'll need

• Bachelor's degree (or equivalent) in computer science, information systems, engineering, or a related technical field, and eight (8) or more years of progressive Windows Infrastructure Engineer and Architect experience, OR Master's degree in a related field and at least six (6) years of relevant experience in the above areas. Equivalent experience can substitute for the degree.
• Minimum of six (6) years of experience in cloud operations, engineering, or a related field.
• Minimum of three (3) years performing at a senior and lead level with design and architecture ownership for an enterprise Windows environment.
• Familiarity with federal compliance (NIST, FISMA, FedRAMP) and CIS 4.0 controls.
• Significant experience designing, operating, and maintaining Microsoft Azure environments, including Zero Trust, hybrid cloud, and cross-domain architectures in mission environments.
• Experience configuring, deploying, and managing Microsoft Entra ID / Azure AD for centralized identity, single sign-on (SSO), and role-based access control (RBAC) across Azure tenants and subscriptions.
• Demonstrated experience integrating federated identity solutions with AWS Identity Center, Entra, or on-premises Active Directory.
• Develop and enforce Azure governance frameworks, including Azure Policy, Management Groups, and Blueprints, aligned with DoD Zero Trust and least-privilege principles.
• Experience with Azure Monitor and cost optimization strategies.
• Deep expertise in Microsoft Azure architecture, Microsoft Entra ID, and on-premises interoperability.
• Ability to script in PowerShell or another computer language.
• Strong understanding of federated identity, modern authentication protocols (SAML, OIDC, OAuth 2.0), and cross-cloud authentication mechanisms.
• Hands-on experience with and knowledge of networking concepts (DNS, VPNs, load balancers, etc.) and cloud-based networking configurations.
• Experience with Microsoft application and third-party software installation and maintenance.
• Experience with physical and virtual server configuration, including OS installation, out-of-band management (iLO, etc.), hardware installation and maintenance, RAID configuration, network adapter configuration, and SCSI and Fiber Channel configuration.
• Experience and ability to immediately contribute to automation tasks and Infrastructure-as-Code tools and templates.
• Experience designing, deploying, and maintaining Active Directory Certificate Services (AD CS) / PKI environments.
• Applied knowledge of system security engineering, including CIS and STIG hardening, vulnerability management, and federal compliance frameworks (FISMA, NIST SP 800-53).
• Extensive experience with Visio or other networking diagram tools and a solid understanding of networking principles.
• Excellent troubleshooting skills and strong problem-solving skills, including root cause analysis.
• Demonstrated ability to complete technical projects independently with strong organizational skills and attention to detail.
• Excellent written and verbal communication skills, including preparing data and presentations and presenting in Leidos and customer meetings.
• ServiceNow experience.
• Current DoD 8570/8140 baseline certification appropriate for Intermediate System Administrator roles (e.g., Security+, GSEC, SSCP, or equivalent).
• Must possess, or be eligible to obtain and successfully complete, a Public Trust background investigation and/or Public Trust clearance.
• Must be a U.S. Citizen.
• Ability to lift 50+ pounds.

Nice to have

• Any other certifications in support of the stated work scope, such as Sumo Logic Certified Administrator, Sumo Logic Certified Security & Compliance, MCSA/MCSE/MCITP credentials on Windows Server 2003, 2008, or 2000, or Microsoft Certified Professional.

Details

• Telework: work primarily offsite with on-site support as needed; remote support from locations other than FTC must be approved by the Leidos TO4 Program Manager.
• Hybrid: onsite 2x per week.
• Hours: FTC core hours Monday through Friday, 8:00 a.m. to 5:00 p.m. EST, with occasional overtime, weekend work, or after-hours response to critical outages and scheduled maintenance windows.
• Hours charged limited to no more than 40 hours per week unless specifically approved by the Leidos TO4 Program Manager.