Forescout Cyber Security Engineer EMCForescout Cyber Security EngineerReston, VA$160,000–$180,000 / yearFull timeManage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises. · Associate’s degree with 5+ years of experience, Bachelor’s degree with 3+ years, or Master’s degree with 1+ year of experience supporting IT projects.
Information Systems Security Engineer System OneInformation Systems Security EngineerClarksburg, MD$180,000 / yearYou’ll be hands-on with the Risk Management Framework (RMF), Assessment & Authorization (A&A), ATO sustainment, control validation, continuous monitoring, and vulnerability/stig compliance efforts—partnering closely with security and technical teams. In this role, you’ll help build, secure, and maintain systems by applying cybersecurity engineering best practices across design, implementation, authorization, and ongoing compliance.
Cribl Engineer Expert EMCCribl Engineer ExpertReston, VA$160,000–$180,000 / yearFull timeMust possess the following DoD 8570.01-M certifications or be willing to obtain within 30 days of hire: · Information Assurance Technician (IAT) Level II certification (currently Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND). You will shape pipeline strategy, design complex routing and transformation logic, drive platform reliability, mentor senior engineers, and serve as the top technical escalation point for Cribl-related challenges.
NewSystems Engineer/Administrator Kaiva TechSystems Engineer/AdministratorArlington, VAFull timeManage and maintain Microsoft 365 services such as Microsoft Intune, Entra admin center with Entra Connect for cloud synchronization, Exchange admin center for mail and mailbox administration, Microsoft Defender, and Microsoft Purview. As a Systems Engineer/Administrator, you will be responsible for ensuring the secure and efficient operation of servers and systems in a variety of environments, including on-premises and cloud-based Microsoft products within our Federal Government Customer's environment.
Unified Endpoint Management (UEM) Mobile Support Engineer 22nd Century Technologies, Inc. (TSCTI)Unified Endpoint Management (UEM) Mobile Support EngineerWashington, DCFull timeCandidate must be able to work core (8:30 am – 5:00 pm) business hours 8 hours a day onsite in Washington, DC, excluding federal holidays and when work is done for system maintenance. If the candidate has reliable high-speed internet, the work can be completed off-site (home) using House-supplied laptop(s).
NewRCDD Technology Engineer JobotRCDD Technology EngineerWashington, DC$140,000–$190,000 / yearInformation collected and processed as part of your Jobot candidate profile, and any job applications, resumes, or other information you choose to submit is subject to Jobot's Privacy Policy, as well as the Jobot California Worker Privacy Notice and Jobot Notice Regarding Automated Employment Decision Tools which are available at jobot.com/legal. This role serves as a trusted advisor to clients, leading technology consulting efforts while supporting business development, proposal preparation, project execution, and team mentorship.
Systems Engineer III (VA) GCR Professional ServicesSystems Engineer III (VA)Chantilly, VirginiaContractorSoftware Tools: Familiarity with systems engineering tools and software used for requirements management, modeling and simulation, configuration management, and project documentation (e.g., DOORS, SysML, MATLAB, Simulink). Education: A bachelor's or master’s degree in engineering, preferably in a relevant field such as Aerospace Engineering, Electrical Engineering, or Systems Engineering, Computer or Software Engineering.
NewDevOps Engineer ADG TECH Consulting LLCDevOps EngineerSterling, VAFull timeHands-on experience with AWS managed services (VPC, EC2, EKS, RDS), including monitoring and analytics tools such as AWS CloudWatch, NewRelic. Maintain, monitor, and help improve the performance and availability of the 24x7 production environment including networks, servers, databases, etc.
DevSecOps Engineer Sparks GroupDevSecOps EngineerManassas, VAU.S. citizenship and the ability to obtain a TS/SCI clearance; experience supporting defense programs or working with RMF, NIST 800-53, STIGs, cloud security, or automated security scanning is preferred. Partner with software engineering, cybersecurity, and operations teams to troubleshoot deployment issues, integrate security controls, and continuously improve development and release processes.
NewConstruction Project Engineer Davron LLCConstruction Project EngineerAlexandria, VARemoteCONSTRUCTION PROJECT ENGINEER | FULLY REMOTE | DMV | A/E/C | MEP COMMERCIAL PROJECTS | BLUEBEAM | EXCEL | WORD | ADOBE ACROBAT | RFIs | SUBMITTALS | CHANGE ORDERS . In this Construction Project Engineer opportunity, you’ll support daily project operations, help strengthen the MEP team, and work with a remote-friendly schedule that still requires you to stay local to the DMV.
NewNetwork Engineer MAXISIQ, Inc.Network EngineerMCLEAN, VAObtained (active or past) Cisco Certified Network Professional (CCNP) or Juniper Network Certified Internet Professional (JNCIP) certifications, or have equivalent experience in designing, implementing and managing multivendor LAN and WAN networks. MAXISIQ is seeking engineering professionals to support network engineering efforts in a fast-paced, high-visibility environment supporting multiple mission networks.
Hybrid Cloud Engineer ECLAROHybrid Cloud EngineerWashington DC, DCCloud Operations & Reliability: Experience designing highly available systems using Azure-native tools for monitoring, backup, disaster recovery, and cost optimization. Virtualization & Core Infrastructure: Deep expertise in VMware (vSphere, ESXi, NSX, vCenter, SRM) and enterprise compute, storage, networking, and Active Directory.
System/DevSecOps Engineer NuAxis InnovationsSystem/DevSecOps EngineerWashington DC, DCThis role collaborates with Product Owners, Federal Project Managers (FPMs), Business Analysts, Solution Architects, UX/UI Designers, QA Engineers, and DevSecOps teams to deliver end-to-end solutions across the full software development lifecycle. The Senior Full Stack Developer is responsible for designing, developing, integrating, and supporting secure, scalable, and high-performing enterprise web applications using modern cloud-native technologies.
NewSenior Databricks Migration Engineer PlanIT GroupSenior Databricks Migration EngineerReston, VALead the technical migration from legacy SQL Server stored procedures and ADF pipelines to Databricks Lakehouse (Delta Lake), ensuring best practice Lakehouse design. They are responsible for designing and creating systems that collect, manage, and convert raw data into usable information for data scientists and business analysts to interpret and enables the agency to make smarter decisions and optimize operations.
NewStorage Engineer - IPv6 Support System OneStorage Engineer - IPv6 SupportWashington, DC$41.69 / hourThe engineer will be responsible for maintaining storage performance, configuring SAN/NAS solutions, troubleshooting IPv6-related issues, and supporting backup and disaster recovery operations. This is a storage infrastructure role focused on managing and supporting enterprise storage environments while ensuring compatibility and connectivity across both IPv4 and IPv6 networks .
NewSr Network Storage Engineer System OneSr Network Storage EngineerWashington, DC$63.56 / hourThe position is responsible for maintaining secure, high-availability storage connectivity, troubleshooting SAN performance issues, and ensuring reliable operations across storage, virtualization, backup, and disaster recovery platforms. This is a senior-level infrastructure engineering role focused on managing and supporting Storage Area Network (SAN) environments in a large enterprise data center.
Quantum Engineer SME DCS CorporationQuantum Engineer SMESpringfield, VAPerform trade studies and conduct analyses to evaluate proposed quantum machine learning approaches, review technical reports, assess product-quality impacts, and characterize performance using quantum simulation or related technologies to support verification and quality assurance. The DCS Air and Space Technology Sector are seeking a qualified candidate to apply subject matter expertise in the areas of quantum engineering, analysis, and system design of complex programming projects supporting National Agencies.
NewSenior Field Engineer Sparks GroupSenior Field EngineerSterling, VAThis role is ideal for a hands-on engineer with strong PLC/HMI programming experience who enjoys field work, troubleshooting complex systems, and traveling to customer sites throughout the U.S. and occasionally internationally. Responsibilities : • Program, troubleshoot, and commission PLC- and HMI-based control systems utilizing RSLogix 500, RSLogix 5000, Studio 5000, and FactoryTalk View platforms.
AWS Cloud Platform Engineer Lead CYNET SYSTEMSAWS Cloud Platform Engineer LeadReston, VA$82–$87 / hourPart timeAs a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia.
NewIT Engineer Specialist System OneIT Engineer SpecialistMerrifield, VARemoteWorking knowledge of Platform as a service (PaaS) preferably Oracle Integration Cloud Service, Oracle Analytics Cloud, Java Cloud Service and various Marketplace offerings in Oracle. Administer, Set-up and Manage Oracle PaaS services such as Oracle Integration Cloud, Oracle Analytics Cloud, Oracle FAW, ODI (Oracle Data Integrator) Marketplace.
NewAI Prompt Engineer System OneAI Prompt EngineerGreenbelt, MD$135,000 / hourThe overall mission of this program is to modernize the IRS legacy Tax processing systems and is critical to the overall modernization of the IRS to improve taxpayer experience, increase voluntary compliance, and reduce the IRS’s reliance on costly and unsustainable legacy technology. We are seeking an experienced AI Prompting Delivery Lead to drive our artificial intelligence initiatives, focusing on prompt engineering and strategic AI application development.
Sr Electrical Engineer (Secret Clearance) System OneSr Electrical Engineer (Secret Clearance)Chantilly, VA$110,000–$170,000 / year10+ years of experience in design and specification of: lighting systems, power systems, fire alarm systems, telcom/data systems, medium voltage power systems, UPS systems, emergency generator systems, grounding systems, and utility systems. Perform calculations, select equipment, and design systems (lighting, power, fire alarm, and telcom/data systems).
Jira Platform Engineer (onsite) System OneJira Platform Engineer (onsite)Washington, DCDesign, implement, and maintain seamless integrations between Jira with other enterprise systems, such as GitLab (source control & CI/CD), and ServiceNow (ITSM), using Okta,REST APIs, webhooks, middleware, and scripting. The DevOps Engineer (specifically Jira Platform Engineer) will serve as the technical owner of our Jira SaaS in government cloud, and is responsible for administering, configuring, and integrating the application within our enterprise technology ecosystem.
NewSenior Associate, Privileged Access Management Delivery Engineer KPMGSenior Associate, Privileged Access Management Delivery EngineerWashington, DC$95,855–$208,265 / yearImplement and maintain PAM capabilities including privileged credential management, session management, just-in-time access, and endpoint management (EPM)components; implement automated integration across adjacent security solutions (for example: Crowdstrike, SIEM solutions, ServiceNow); automate PAM tasks using scripting and APIs (such as PowerShell, Python, REST, and others) and integrate with enterprise platforms (that is, Active Directory, IdPs, ITSM platforms, SIEM platforms, and more). Hands on experience with Privileged Access Management delivery and engineering, with specific experience using CyberArk On-Prem and SaaS solutions; additional experience with secrets management platforms (that is, Conjur, HashiCorp) and other PAM platforms (such as Delinea, BeyondTrust) preferred.
Firewall Engineer- Active Secret Clearance Required VETS, IncFirewall Engineer- Active Secret Clearance RequiredSpringfield, VAHowever, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. Will engage in attacks against the infrastructure, develop security tools, analyze access patterns and hacking behavior, audit source code for vulnerabilities, work with the team to improve best practices and deploy attack detection and prevention tools.
NewAI Software Engineer System OneAI Software EngineerChantilly, VACore Qualifications: Requires BS degree (Computer Science, Engineering or related field) and 10+ year’s of prior relevant experience OR, MS with 7+ year’s of prior relevant experience; OR 7 years of additional experience in lieu of degree. 7+ year’s experience leading, designing and implementing distributed solutions and 5+ year’s experience with cloud-based solutions (Cloud, SOA, Web-Services) including virtualization environment, network and operating system experience.
Active Directory Engineer System OneActive Directory EngineerSpringfield, VA$130,000 / yearSystem One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. Manage Active Directory, DNS, SCOM\SCCM, group policy, and PowerShell scripting to ensure system integrity and security.
NewSr. Windows Server Tower Lead (Solution Engineer) System OneSr. Windows Server Tower Lead (Solution Engineer)Washington, DC$56.23 / hourManage service delivery, including provisioning, patching, vulnerability remediation, and documentation of server environments across multiple platforms and cloud providers. Provide oversight and management support for over 30 Windows engineers responsible for operations, maintenance, and engineering support for the Department of Transportation's Common Operating Environment (COE).
NewMicrosegmentation Engineer System OneMicrosegmentation EngineerVienna, VARemoteThis role will focus on designing, implementing, and supporting microsegmentation controls using Illumio to reduce lateral movement risk and enforce least-privilege access across enterprise workloads. The engineer will analyze application traffic flows, create and enforce microsegmentation policies, reduce lateral movement risk, troubleshoot connectivity issues, and work closely with infrastructure, application, cybersecurity, and architecture teams.
MMS Technology Engineer System OneMMS Technology EngineerBethesda, MDRemote$25 / hourResponsible for supporting multiple customers with their MDM environment, including, but not limited to, managing the administration console, application management, server maintenance and installation, and technical documentation write-ups. System One IT is staffing a 4-5 month remote contract opening for a Mobile Device Management (MDM) / Workspace ONE Engineer role to support enterprise mobility environments.
Accessibility Engineer System OneAccessibility EngineerVienna, VASystem One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. • Support Marketing Technology Services Delivery teams across products including marketing website (NFO), intranet (eNet), and design system (Cmd+R).
NewEngineer; Cloud Systems or Architect, Cloud Systems GCP (Google Cloud Professional) (SME) PlanIT GroupEngineer; Cloud Systems or Architect, Cloud Systems GCP (Google Cloud Professional) (SME)Reston, VAClient CIO Architecture, Strategy & Innovation (CASI) is responsible to assist Vice President of Information Technology (IT) design, develop, maintain, support, and translate corporate business vision and strategy along with stakeholder input into objectives for building, enhancing, or replacing business and IT systems capabilities, together with an implementation of a comprehensive IT roadmap, all-the-while maintaining resilience to change as a key architectural and strategy objective for the enterprise. • Tasks – might include (neither exhaustive nor restrictive): o Advises and assists IT functional groups to define and implement solutions aligned with a Cloud based Microservices / Service Oriented Architecture (SOA) for infrastructure or business applications.
Virtualization Engineer System OneVirtualization EngineerSpringfield, VA$175,000 / yearConfigure and troubleshoot NetApp Storage – ONTAP, perform firmware and OS upgrades, and utilize storage management tools like OnCommand Unified Manager and Performance Manager. Design, implement, and support VMware vSphere, vCenters, and Microsoft Active Directory Forests with JIT administration to support multiple PKI systems.
NewSoftware Packaging Engineer- Active Top Secret Clearance Required VETS, IncSoftware Packaging Engineer- Active Top Secret Clearance RequiredWashington, DCHowever, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. This senior engineering position requires extensive hands-on experience in packaging, testing, and delivering baseline and non-baseline software to both classified and unclassified government networks.
NewSenior Associate, SailPoint Identity Governance Engineer KPMGSenior Associate, SailPoint Identity Governance EngineerWashington, DC$95,855–$208,265 / yearSolid understanding of core Identity and Access Management principles, including identity lifecycle management, access requests, access certification, and role engineering; understanding of IAM and governance concepts, security controls, and regulatory requirements related to access governance (for example: SOX, NIST, ISO 27001); familiarity with cloud environments (AWS, Azure, or GCP). If you're looking for a firm with a strong team connection where you can be your whole self, have an impact, advance your skills, deepen your experiences, and have the flexibility and access to constantly find new areas of inspiration and expand your capabilities, then consider a career in Advisory.
NewDevSecOps Engineer IV PlanIT GroupDevSecOps Engineer IVReston, VAExperience with creating and improving automation scripts across multiple technical stacks using Python, • Experience with troubleshooting and resolving issues related to both open source and commercial tools in public cloud environments. • Experience with AWS & Azure & the development of tools and processes to drive DevSecOps maturity by automating builds, regression testing, monitoring, and pushing releases across environments.
SR. DevOps AWS Cloud Engineer System OneSR. DevOps AWS Cloud EngineerChantilly, VA$180,000 / yearThis role is ideal for someone who enjoys improving CI/CD, partnering closely with developers, and driving reliability + security in production-like environments. You’ll work in a Linux-based, multi-tenant environment and play a key role in building and operating secure, automated delivery pipelines for microservices.
Enterprise Architect/Systems Engineer LeidosEnterprise Architect/Systems EngineerBethesda, MD$131,300–$237,350Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
NewTest Engineer (AN/BYG-1) JobotTest Engineer (AN/BYG-1)Manassas, VA$85,000–$95,000 / yearInformation collected and processed as part of your Jobot candidate profile, and any job applications, resumes, or other information you choose to submit is subject to Jobot's Privacy Policy, as well as the Jobot California Worker Privacy Notice and Jobot Notice Regarding Automated Employment Decision Tools which are available at jobot.com/legal. We are a leading provider of information technology, logistics management, business process re-engineering, financial management, and administrative support services for the Department of the Navy and Homeland Security.
NewSpecialist, Federal Cloud Engineer KPMGSpecialist, Federal Cloud EngineerWashington, DCWork in cross-disciplinary teams with KPMG industry professionals to understand client needs and be part of teams developing holistic operational solutions & applications contributing to cloud infrastructure / DevOps capabilities. If you're looking for a firm with a strong team connection where you can be your whole self, have an impact, advance your skills, deepen your experiences, and have the flexibility and access to constantly find new areas of inspiration and expand your capabilities, then consider a career in Advisory.
NewLead Specialist, Federal Data Engineer KPMGLead Specialist, Federal Data EngineerWashington, DCIf you're looking for a firm with a strong team connection where you can be your whole self, have an impact, advance your skills, deepen your experiences, and have the flexibility and access to constantly find new areas of inspiration and expand your capabilities, then consider a career in Advisory. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation.
NewSenior Specialist, Federal Cloud Engineer KPMGSenior Specialist, Federal Cloud EngineerWashington, DCIf you're looking for a firm with a strong team connection where you can be your whole self, have an impact, advance your skills, deepen your experiences, and have the flexibility and access to constantly find new areas of inspiration and expand your capabilities, then consider a career in Advisory. Work in cross-disciplinary teams with KPMG industry professionals to understand client needs and be part of teams developing holistic operational solutions & applications contributing to cloud infrastructure / DevOps capabilities.
Machine Learning Engineer Capgemini Government Solutions LLCMachine Learning EngineerWashington, DCHowever, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. Capgemini Government Solutions (CGS) LLC is seeking a highly motivated Machine Learning (ML) Engineer with an active security clearance to deliver high-quality code components to power the services, servers, distributed systems, and backend architecture.
NewJunior Systems Engineer (Linux/Windows/Clearance) JobotJunior Systems Engineer (Linux/Windows/Clearance)Manassas, VA$80,000–$100,000 / yearInformation collected and processed as part of your Jobot candidate profile, and any job applications, resumes, or other information you choose to submit is subject to Jobot's Privacy Policy, as well as the Jobot California Worker Privacy Notice and Jobot Notice Regarding Automated Employment Decision Tools which are available at jobot.com/legal. Integrating and testing software deliveries, verifying bug fixes, and performing regression testing across multiple hardware and operating system configurations.
Lead Data Scientist Calibre SystemsLead Data ScientistAlexandria, VACALIBRE Systems inc, an employee-owned mission focused solutions and digital transformation company, is looking to hire a Lead Data Scientist to provide senior-level technical and management leadership in support of a federal civilian government agency. · Interface with senior government leaders, contracting representatives, program managers, technical teams, and other stakeholders to communicate progress, resolve issues, negotiate priorities, and support informed decision-making.
NewSoftware Systems Integration Engineer - RHEL/Windows - Secret Clearance Required JobotSoftware Systems Integration Engineer - RHEL/Windows - Secret Clearance RequiredManassas, VA$90,000–$115,000 / yearInformation collected and processed as part of your Jobot candidate profile, and any job applications, resumes, or other information you choose to submit is subject to Jobot's Privacy Policy, as well as the Jobot California Worker Privacy Notice and Jobot Notice Regarding Automated Employment Decision Tools which are available at jobot.com/legal. Integrating and testing software deliveries, verifying bug fixes, and performing regression testing across multiple hardware and operating system configurations.
NewSenior Software Engineer (C++ / Java) JobotSenior Software Engineer (C++ / Java)MONTGOMRY VLG, MD$165,000–$185,000 / yearWith deep expertise in cloud-first architectures, automation, DevSecOps, virtualization, reliability engineering, and large-scale systems integration, we help organizations modernize infrastructure, improve operational efficiency, and support mission-critical environments where performance, security, and resiliency are essential. This role is ideal for a seasoned engineer who enjoys solving complex technical challenges, contributing to system architecture, and partnering closely with Systems Engineering, Development, and Test teams to deliver robust, scalable solutions.
Data Storage Engineer LeidosData Storage EngineerPoolesville, MD$107,900–$195,050If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com. Extensive experience administering enterprise-level data storage systems (Dell Storage Center, Dell Compellent, and Data Domain preferred) with a demonstrated understanding of the following services and technologies.
Senior Systems Engineer LeidosSenior Systems EngineerLaurel, MD$131,300–$237,350This may include decomposing features into workable stories, prioritizing or reprioritizing items in the backlog for upcoming sprints, refining acceptance criteria and complexity estimates or removing tickets that are no longer relevant. Leidos has an exciting opening for you, as our next TS/SCI cleared Senior Systems Engineer, to play a critical role with design, engineering, development and deployment of software supporting the DIA-NMEC (National Media Exploitation Center) DOMEX Technology Platform (DTP).
Active Directory Architect / Engineer LeidosActive Directory Architect / EngineerSilver Spring, MD$131,300–$237,350Design, deploy, upgrade, and administer Active Directory Domain Services, including domain controllers, forests, domains, trusts, and replication topologies (i.e. Manage and optimize Group Policy Objects (GPOs), OU structures, and security baselines; including object management through bulk operations and automation, Troubleshoot and resolve complex AD-related issues, including authentication failures, replication problems, DNS issues, and Kerberos/NTLM problems, Plan and execute Active Directory migrations, consolidations, and upgrades (of both underlying server infrastructure and overall forest/domain functional levels), Develop and maintain disaster recovery, backup, and restore procedures for AD environments (including AD Recycle Bin and authoritative restores), Monitor AD health and performance using tools such as Microsoft System Center, Azure Monitor, or third-party solutions). Deep expertise in designing, deploying, upgrading, and administering Microsoft Active Directory Domain Services (AD DS), including domain controllers, multi-domain/forest architectures, trusts, replication topologies, Group Policy Objects (GPOs), OU design, and security baselines.