Design, research, engineer, and deploy strategies for policy distribution in high-security cloud environments.
Provide Site Administrator support and Enterprise monitoring for Group Policy Objects, including initial troubleshooting and the addition of Security Groups to Group Policy Objects.
Expertise in DoD security directives, DISA STIGs, and DHA cybersecurity requirements
Experience/Skills
Technical Skills and Experience
Active Directory (AD) & Domain Controller (DC) Administration
5+ years managing Windows Server environments with Active Directory in large/complex networks.
Deep understanding of AD replication, Kerberos, LDAP, Group Policy, and FSMO roles.
Familiarity with performance tuning and troubleshooting on DCs.
Windows Server Administration
Expertise in Windows Server 2016/2019/2022 internals, registry, event logs, and system services.
Knowledge of Windows security baselines (CIS, DISA STIG).
Prior experience deploying enterprise tools on DCs (AV, endpoint protection, vulnerability scanning).
McAfee ePolicy Orchestrator (ePO) & Policy Auditor
Experience configuring, deploying, and managing agents/policies through ePO.
Understanding of Policy Auditor content packs, custom checks, and compliance reporting.
Security Compliance & Vulnerability Management
Ability to map technical checks to compliance frameworks (e.g., NIST 800-53, PCI-DSS, SOX).
Familiarity with vulnerability and patch management processes.
Performance & Monitoring Tools
Skilled with Windows PerfMon, Resource Monitor, and event tracing to baseline DC performance.
Ability to correlate PA scan impact with AD health (replication monitoring, dcdiag, repadmin).
Scripting & Automation
Proficiency in PowerShell to automate pre-deployment health checks, reporting, and rollbacks.
Experience integrating scan results into SIEM dashboards or compliance workflows.
Education
A BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science
Relevant continuing education in enterprise security or systems administration
Certifications
Microsoft Certified: Cyber Security Architect Expert or
Microsoft Certified: Azure Solutions Architect Expert or
Microsoft Certified: Azure Administrator Associate or
Microsoft Certified: Windows Server Hybrid Administrator Associate
Highly Desired – Any of the following
CompTIA Security+ CE
CISSP
CISA
GIAC Certified Windows Security Administrator (GCWN) or GIAC Security Essentials (GSEC)
Trellix Certified Product Specialist (ePO)
Clearance
Active Secret clearance is required.
Must be a United States Citizen and pass a background check.
Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).
FEDITC, LLC. is committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision-making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran, FEDITC, LLC. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws. Our commitment to non-discrimination in employment extends to every location in which our company operates.
