Identity and Access Management System Administrator (25-441)

Identity and Access Management System Administrator (25-441)

Role overview and company context is provided by Trace3. Trace3 is a leading Transformative IT Authority delivering technology solutions and consulting services to clients, with a culture that blends startup energy and scalable growth.

Overview

The Identity and Access Management System Administrator will manage the deployment and maintenance of enterprise directory service functions, including Active Directory domain services / controllers, certificate authority services, policy creation and tracking, and account management. The role requires attention to detail to assess and track the impact of changes on critical infrastructure components (e.g., replication schedules and group policies). This position also serves as Scrum Master for a small Agile team to ensure effective collaboration and delivery.

Responsibilities

• Deploy and maintain Active Directory domain services / controllers; monitor health and status of sites and services across the enterprise.
• Deploy and maintain Certificate Authority (CA) services, issue SSL certificates, and build out CA servers; track CA certificate expiration dates and coordinate renewals with relevant teams.
• Create and maintain system policies (e.g., Windows Group Policies, Linux PAM rules) and monitor for issues in coordination with the Linux / Unix team.
• Maintain account matrices and manage cross-enclave permissions as needed.
• Work with the cyber team to ensure RBAC controls comply with policies and enforce restricted access between enclaves and systems.
• Assist the cyber team in monitoring directory services for anomalous logins or account behavior metrics to protect data integrity of enterprise systems.
• Collaborate with other teams to deploy and maintain technologies with collaborative aspects (e.g., enterprise instant messaging platforms).
• Configure and maintain distributed authentication services to ensure non-repudiation; assist with LDAP configurations to enable RBAC access (e.g., HPE iLO, GitLab, Cisco ISE, FortiManager, Raritan KVM).
• Understand Active Directory replication in distributed forests and WAN-separated environments; work in on-premise multi-domain environments with RBAC and least privilege principles.
• Support DISA STIG compliance remediation through distributed group policy and SCAP scanners.
• Integrate automation technologies into daily Active Directory use (preferred).

Qualifications

Education

Bachelors with 9+ years of experience or Masters with 7+ years of experience, or equivalent.

Location and Clearance

Location : Full Time / On-Site at Schriever in Colorado Springs, CO

Clearance Requirement : Top Secret

Salary

Salary range : $122,000 to $145,000. Actual salary based on location, experience, skill set, performance, licensure and certification, and business needs. Some positions may be eligible for variable incentive compensation.

Perks and Benefits

Our Commitment and EEO

Trace3 is committed to fostering an inclusive workplace where everyone is respected, valued, and empowered to grow. We are an equal opportunity employer and do not discriminate on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age, disability, or any other protected characteristic. We may request voluntary demographic information for government reporting purposes, kept confidential and not used in hiring decisions. If you require a reasonable accommodation to participate in the application process, please email recruiting@trace3.com.

J-18808-Ljbffr