Sr. Systems Engineer

Description What You'll Do -Lead the design and deployment of Active Directory forest and domain architecture, including multi-domain and multi-forest environments -Architect and implement Active Directory Federation Services (ADFS) solutions to enable single sign-on (SSO) across classified and unclassified systems -Design and configure cross-domain and cross-forest trust relationships in complex, segmented network environments -Develop and enforce role-based access control (RBAC) frameworks, group policy objects (GPOs), and delegation models aligned with least-privilege principles -Align directory services architecture with DISA STIG requirements, NIST 800-53 controls, and program-specific security policies -Collaborate with cybersecurity teams to support ATO processes, RMF documentation, and identity-related continuous monitoring requirements -Serve as the subject matter expert for identity and directory services, providing technical leadership and mentorship to junior engineers -Troubleshoot and resolve complex Active Directory, ADFS, and identity federation issues across multi-domain environments -Evaluate emerging identity and access management technologies and recommend solutions aligned with program roadmaps and government requirements -Produce and maintain technical documentation including forest design diagrams, trust maps, RBAC matrices, and configuration baselines What You Bring -8–10+ years of hands-on experience in systems engineering with deep expertise in Active Directory architecture and identity management -Demonstrated experience designing and deploying AD forest and domain structures in large-scale enterprise or government environments -Strong working knowledge of ADFS, SSO federation protocols (SAML, OAuth, WS-Federation), and identity provider configuration -Experience designing and managing cross-domain and cross-forest trust relationships in segmented or classified network environments -Deep understanding of RBAC frameworks, GPO design, and least-privilege access models -Working knowledge of DISA STIGs, NIST 800-53, and RMF as applied to directory services and identity infrastructure -Active Top Secret security clearance required; TS/SCI eligibility strongly preferred -Microsoft certifications (MCSE, Azure AD, or equivalent) a strong plus Preferred Qualifications -Prior experience supporting classified programs in a DoD, IC, or cleared defense contractor environment -Familiarity with Azure Active Directory, hybrid identity architectures, and cloud identity integration -Experience with Privileged Access Management (PAM) solutions such as CyberArk or BeyondTrust -Familiarity with PKI infrastructure, certificate services, and smart card authentication in DoD environments -Experience with PowerShell scripting for AD automation and administration -Bachelor's degree in Computer Science, Information Technology, Systems Engineering, or a related field; equivalent experience considered -DoD 8570/8140 IAT Level II or III certification (Security+, CASP+, CISSP, or equivalent) Skills Systems engineering, Active directory, adfs sso, trust configuration, rbac mapping, security alignment, Architecture, Design, Systems architecture Top Skills Details Systems engineering,Active directory,adfs sso,trust configuration,rbac mapping,security alignment Additional Skills & Qualifications AD forest design, ADFS SSO, trust configuration, RBAC mapping, security alignment Experience Level Expert Level Job Type & Location This is a Contract position based out of Richardson, TX. Pay and Benefits The pay range for this position is $80.00 - $80.00/hr. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: • Medical, dental & vision • Critical Illness, Accident, and Hospital • 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available • Life Insurance (Voluntary Life & AD&D for the employee and dependents) • Short and long-term disability • Health Spending Account (HSA) • Transportation benefits • Employee Assistance Program • Time Off/Leave (PTO, Vacation or Sick Leave) Workplace Type This is a fully remote position. Application Deadline This position is anticipated to close on Aug 25, 2026. About TEKsystems We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company. The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. About TEKsystems and TEKsystems Global Services We’re a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We’re a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We’re strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We’re building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com. The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records. Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.