Accounts Management Technician (Mid-level)

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform® provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have. The result is a government workforce that is exponentially more creative and productive. For more information, visit www.Empower.ai.

Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company’s commitment to hiring and supporting active-duty and veteran employees.

Primary Duty – Active Directory Account Administration, Scripting, and Independent Judgment

The primary duty of this position is the independent application of systems analysis techniques and specialized technical knowledge to perform end user account lifecycle administration across NIPRNet, SIPRNet, and Yellow Network using Active Roles Server, DEPO, DEOS, and Defense Enterprise Email, including resolution of access-related shortfalls, dormant account processing, journaling administration, and PowerShell/Python scripting for bulk operations. The candidate exercises discretion and independent judgment in technical resolution decisions, in dormant account disposition, in journaling administration, and in scripting design for bulk operations — without continuous direct supervision on individual technical decisions.

• Independently utilizes Active Roles Server and Government-provided provisioning tools to create, manage, and modify end user NIPRNet, SIPRNet, and Yellow Network accounts, processing approximately 5,700 transactions per month IAW Section 7 Performance Standards.
• Independently creates, modifies, disables, and deletes accounts across NIPRNet, SIPRNet, and Yellow Network using DISA DOD365-J DEPO, DEOS, and Defense Enterprise Email capabilities; creates local AD accounts prior to requesting provisioning.
• Resolves end-user access-related shortfalls including shared drive access, calendars, group mailboxes, VPN/Citrix account management, and SharePoint access IAW J6 Accounts Management SOP; exercises judgment in selecting the appropriate technical remediation for each access shortfall.
• Develops and maintains the Account Documentation Repository with received account-related documents including CAC Exclude forms, Dormant Account Exception Forms, and DD 2875s, 95% of the time.
• Independently identifies and processes dormant and inactive accounts IAW J6 Accounts Management SOP; confirms with customer organization contacts; disables or removes target accounts; contributes to the monthly Dormant Accounts Report.
• Ensures CAPSTONE, GOFO, PAS, Honorable, and Judge accounts are flagged for journaling; validates journaling status and contributes to the monthly Accounts Journaling Report.
• Independently coordinates with VIP Support team prior to any VIP account modifications; provides Disabled or Deleted Accounts Lists monthly to Unclassified Mobile and Classified Mobile teams.
• Performs Python scripting and PowerShell scripting in support of bulk account creations, modifications, or deletions; supports persona bulk operations and enterprise-wide account setting projects; exercises judgment in script design and testing.
• Initiates resolution steps with DISA to establish, delete, or resolve email-related issues; coordinates new customer codes for newly formed DOD organizations.
• Provides accounts management subject matter expertise for Cyber inspections, Continuous Monitoring audits, and data calls (approximately six per year) and information requests from DoD Inspector General, General Counsel, or Records Managers (approximately two per month).

Highlights of Responsibilities

In fulfillment of the primary duty described above, and in performance of PWS Section 6.5 task requirements, the candidate is responsible for:

• Utilizing Active Roles Server and Government-provided provisioning tools to create, manage, and modify end user NIPRNet, SIPRNet, and Yellow Network accounts, processing approximately 5,700 transactions per month IAW Section 7 Performance Standards.
• Creating, modifying, disabling, and deleting accounts across NIPRNet, SIPRNet, and Yellow Network using DISA DOD365-J DEPO, DEOS, and Defense Enterprise Email capabilities; creating local AD accounts prior to requesting provisioning.
• Resolving end-user access-related shortfalls including shared drive access, calendars, group mailboxes, VPN/Citrix account management, and SharePoint access IAW J6 Accounts Management SOP.
• Developing and maintaining the Account Documentation Repository with received account-related documents including CAC Exclude forms, Dormant Account Exception Forms, and DD 2875s, 95% of the time.
• Identifying and processing dormant and inactive accounts IAW J6 Accounts Management SOP; confirming with customer organization contacts; disabling or removing target accounts; contributing to the monthly Dormant Accounts Report.
• Ensuring CAPSTONE, GOFO, PAS, Honorable, and Judge accounts are flagged for journaling; validating journaling status and contributing to the monthly Accounts Journaling Report.
• Coordinating with VIP Support team prior to any VIP account modifications; providing Disabled or Deleted Accounts Lists monthly to Unclassified Mobile and Classified Mobile teams.
• Performing Python scripting and PowerShell scripting in support of bulk account creations, modifications, or deletions; supporting persona bulk operations and enterprise-wide account setting projects.
• Initiating resolution steps with DISA to establish, delete, or resolve email-related issues; coordinating new customer codes for newly formed DOD organizations.
• Providing accounts management subject matter expertise for Cyber inspections, Continuous Monitoring audits, and data calls (approximately six per year) and information requests from DoD Inspector General, General Counsel, or Records Managers (approximately two per month).

Requirements

• Active TS/SCI security clearance at time of award.
• Demonstrated ability to independently apply systems analysis techniques and specialized technical knowledge to perform end user account lifecycle administration in a multi-network classified environment without continuous direct supervision.
• Ability to exercise discretion and independent judgment in technical resolution decisions, in dormant account disposition, in journaling administration, and in scripting design for bulk operations.
• Working knowledge of Active Directory administration, Active Roles Server, DOD365-J DEPO, DEOS, Defense Enterprise Email, PowerShell and Python scripting for IAM operations, shared drive/calendar/SharePoint/VPN account management, and DoD account-management policies.
• Strong analytical and problem-solving skills with a demonstrated record of resolving complex account management incidents.
• Strong customer service orientation with demonstrated experience in DoD or other large federal customer environments.
• Ability to effectively prioritize and execute tasks across multiple concurrent incidents and bulk operations in a high-pressure environment.
• Good written, oral, and interpersonal communication skills; ability to present technical ideas in business-friendly and user-friendly language.
• Ability to conduct research into PC and software issues and products as required.
• Highly self-motivated and directed; capable of operating with minimal supervision.
• Keen attention to detail and rigorous documentation standards consistent with DoD compliance requirements.
• Team-oriented and skilled in working within a collaborative environment.

Education and Experience

• Required Education: Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related technical discipline; or equivalent combination of advanced vendor certification (including vendor certification in the technology being applied) and directly relevant professional experience accepted in lieu of degree.
• Required Experience: 6 or more years of progressively responsible professional experience in Active Directory administration, identity and access management, or DoD account lifecycle operations in roles requiring independent judgment and technical decision-making.
• Preferred Experience: Prior experience supporting a DoD or J6 customer environment, including multi-network classified IAM, Active Roles Server administration, DOD365-J operations, and PowerShell/Python scripting.
• Required Certifications: ITIL v4 Foundations, CompTIA Security+, Microsoft Active Directory or equivalent.
• Preferred Certifications: Microsoft Certified: Identity and Access Administrator, Azure Administrator Associate.

Physical Requirements

The essential physical functions below are incidental to the primary analytical duties of this position and are performed in furtherance of the technical responsibilities described herein:

• Ability to sit and stand for extended periods in a professional office environment.
• Ability to ambulate throughout office buildings and supported facilities.
• Ability to stoop, kneel, crouch, or crawl as required to access equipment in confined spaces.
• Ability to repeatedly lift and carry equipment up to 50 pounds.

All hiring and promotion decisions at Empower AI are based on merit to bring the best talent available to contribute to our firm’s overall success. It is the policy of Empower AI not to discriminate against any applicant for employment, or employee because of age, color, sex, disability, national origin, race, religion, or veteran status. Empower AI is a VEVRAA Federal Contractor.