_{10th November, 2026}

Role: Cloud Systems Engineer - Active Directory and Windows
 
Location: Fairfax, VA — Hybrid (3 days onsite per week)
 
Job Description:
 
We are seeking a Cloud Systems Engineer - Active Directory and Windows to join a team responsible for managing and maintaining multiple network enclaves to support the DoD community. A successful candidate will design, operate and improve Active Directory, Windows operating systems, identity services and Windows Server services in a Multi-cloud environment spanning Microsoft Azure and Amazon Web Services (AWS). This engineer will support cloud-hosted directory services, Windows workloads, and integrations with Multiple Microsoft Azure and AWS cloud environments. The role focuses on secure, reliable operations and automation across both cloud platforms. This is a demanding, high-energy position that requires innovative solutions to network, hardware, and software problems. The ideal candidate possesses excellent communication skills; is a motivated, self-starter who enthusiastically tackles operational challenges, and can quickly grasp and implement creative solutions; and is both customer-service and career growth-oriented.
 
Key Responsibilities:
 
Administer and maintain cloud-hosted Active Directory Domain Services and Windows Server environments in Azure and AWS.
 
Design and support identity integrations among Active Directory, Microsoft Entra ID, AWS services, Keycloak, and AppGate.
 
Manage directory objects, organizational units, group policy, DNS, domain controllers, trusts, and access controls.
 
Build, configure, patch, harden, and troubleshoot Windows Server and desktop workloads.
 
Implement and maintain identity lifecycle, authentication, authorization, and privileged access controls.
 
Monitor directory and Windows services for availability, performance, security events, and capacity.
 
Automate routine administration and configuration using PowerShell and infrastructure-as-code tools.
 
Apply security baselines, vulnerability remediation, logging, and audit requirements to Windows and directory services.
 
Develop backup, recovery, and business continuity procedures for directory services and Windows workloads.
 
Collaborate with cloud, security, and application teams to plan changes, resolve incidents, and support deployments.
 
Maintain technical documentation, operational procedures, diagrams, and change records.
 
Requirements:

• U.S. citizenship.
• Active DoD Secret security clearance.
• Bachelor's degree in a related field of study and 5+ years of experience. Alternatively, high school diploma and 9+ years of relevant experience.
• Ability to obtain DoD 8140 IAT Level II Security+ (or higher) within 60 days of hire.
• Administering Microsoft Active Directory Domain Services and Windows Server in production environments.
• Microsoft Entra ID, including synchronization or identity integration concepts, single sign-on, enterprise applications, and conditional access.
• PowerShell scripting for administration and automation.
• Building, maintaining, patching, and versioning standardized Windows operating system images for cloud deployments, including AWS AMIs and custom Azure virtual machine images.
• Applying DoD Security Technical Implementation Guides (STIGs) to Windows Server images and workloads, validating compliance, remediating findings, and documenting approved exceptions.
• Designing, deploying, and maintaining Azure Virtual Desktop (AVD) environments, including host pools, session hosts, application groups, workspaces, and user access.
• Managing AVD session host images, including image creation, updates, patching, testing, and deployment.
• Documenting technical procedures and participating in incident and change management.
• DNS, Group Policy, domain controller management, directory replication, OU Design, Site Design, authentication, and access management.
• Networking concepts relevant to cloud-hosted directory services, including VPCs or virtual networks, routing, firewalls, and name resolution.
• Supporting Windows workloads in at least one major cloud platform: Azure or AWS.
• FSLogix profile containers and troubleshooting user profile, sign-in, and session issues.
• Troubleshoot identity, authentication, Single Sign-on, Windows operating systems, and connectivity issues.
• Monitor and troubleshoot AVD performance, availability, capacity, and user experience; experience configuring autoscaling or host-pool scaling is preferred.
• Knowledge of AVD identity, access, and networking requirements, including Microsoft Entra ID, Active Directory integration, role-based access control, and connectivity to required services.
• Strong communication skills and the ability to work across infrastructure, security, and application teams.
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

 
Qualifications — Preferred:

• Relevant certifications such as Microsoft Azure Administrator, Azure Security Engineer, AWS SysOps Administrator, or AWS Security Specialty.
• Operating Windows and directory services across both Azure and AWS.
• AWS Managed Microsoft AD, AWS Directory Service, or Azure-hosted Active Directory Domain Services.
• Microsoft Entra Domain Services or other managed directory offerings.
• Infrastructure as code, such as Terraform, AWS CloudFormation, or Bicep.
• Configuration management or automation tools such as Ansible, DSC, or Azure Automation.
• Designing highly available directory services, backup strategies, disaster recovery, and recovery testing.
• AWS IAM and Azure role-based access control, including identity federation and single sign-on.
• Cloud monitoring, security information and event management, and centralized logging platforms.
• Web server administration (IIS, Apache, NGINX, etc.).
• DevOps technologies.
• Storage technologies and procedures.
• Patch Management solution implementation.
• System orchestration (Chef, Puppet, Ansible, etc.).
• AWS, Microsoft Azure, Google Cloud Platform.

 
Additional Details:
 
Salary: $130,000-$165,000 per year, commensurate with qualifications and experience.
 
To Apply:
 
Apply through Falcon's application page or send your current resume to recruiters@falconitss.com.

Apply For Job