Computer Systems Engineer Architect – SME

At Aretec, Inc., we are catalysts for change within the federal government landscape. Specializing in advanced analytics, machine learning, data analysis, cybersecurity, and business optimization, we empower federal agencies to achieve their most critical missions. As a premier partner and prime vendor, we deliver innovative, high‑impact solutions that address complex challenges and drive national progress. Our commitment to excellence and innovation positions us at the forefront of transforming governmental operations, enhancing efficiency, and making a lasting difference in the lives of citizens.

You

You are a visionary technical leader with deep expertise in enterprise identity, authentication, and infrastructure engineering. You thrive in complex, mission‑critical environments where reliability, security, and precision are non‑negotiable. You bring authoritative knowledge of Active Directory, PKI, DNS, virtualization, and enterprise authentication systems—and you excel at designing, modernizing, and securing large‑scale federal environments. You are driven by the opportunity to architect solutions that strengthen national operations and support the missions of federal agencies.

We are seeking a Computer Systems Engineer Architect – SME who will play a pivotal role in advancing enterprise identity, authentication, and infrastructure capabilities for our federal partners. In this role, you will lead the engineering and modernization of mission‑critical directory services that support more than 100,000 users across the Department of the Interior.

Architect and implement enterprise Active Directory, PKI, DNS, and authentication solutions that enhance security, availability, and operational resilience across federal environments.

Partner with cross‑functional engineering, cybersecurity, and operations teams to design scalable, compliant, and secure identity and infrastructure solutions.

• Strategic Impact

Evaluate emerging technologies, modernization opportunities, and federal cybersecurity requirements to guide strategic decisions and strengthen enterprise architecture.

• Stakeholder Engagement

Engage with federal leadership, bureau administrators, and technical teams to understand mission needs and deliver solutions that drive operational excellence.

• Mentorship and Leadership

Serve as a senior technical authority, providing guidance, training, and knowledge transfer to engineers and administrators across the enterprise.

The Computer Systems Engineer Architect – SME provides senior‑level engineering, architectural design, and operational oversight for the Department of the Interior's Enterprise Active Directory (EAD) and Enterprise Directory Services (EDS) environments. This role delivers authoritative expertise across identity services, PKI, DNS, virtualization, systems integration, and enterprise authentication.

The SME ensures high availability, security, compliance, and modernization of mission‑critical directory and infrastructure services supporting more than 100,000 DOI users. This position functions as a top‑tier technical authority, guiding engineering decisions, leading complex troubleshooting, and supporting enterprise‑wide initiatives in alignment with NIST, ITIL, FISMA, HSPD‑12, and DOI OCIO standards.

• Architect, design, implement, and maintain DOI's Enterprise Active Directory (EAD) and identity services.
• Lead engineering for domain controllers, forest architecture, replication, schema management, and cross‑domain trust relationships.
• Develop and maintain configuration, release, and change management processes.
• Engineer and maintain GPOs, AGPM, and enterprise configuration baselines.
• Operate and maintain enterprise PKI services including CAs, HSMs, CRLs, OCSP responders, and certificate templates.
• Support smart card authentication, HSPD‑12, and secure credential issuance.
• Engineer and maintain ADFS, SAML 2.0, and federated authentication services.

• Administer enterprise DNS, the EDS namespace (), and DNS security configurations.
• Maintain…