Enterprise Systems Engineer Subject Matter Expert/Secret Clearance/Doha, Qatar

LAUKOA brings together a diverse portfolio of companies delivering mission-critical services to the Department of Defense, federal agencies, and commercial organizations. From environmental stewardship and infrastructure support to technology, operations, maintenance, and construction services, we help clients accomplish their goals through expertise, innovation, and trusted partnerships. Rooted in Native Hawaiian values, we are committed to delivering results that strengthen organizations, communities, and future generations.

Whether you’re building critical infrastructure in Greenland, supporting federal health programs in Florida, or protecting ecosystems in the Pacific, LAUKOA brings together people who care about what they do.

Current job opportunities withLAUKOA are posted here as they become available. Check back often for new positions!

• Salary Range - 175,000 to 230,000
• Clearance - A successful candidate must have an active "Secret" clearance to be considered.
• Provided - Housing, vehicle, $165/day for "Meals and Incidental Expenses" and 20% extra OCONUS pay
• Benefits - Best-in-class benefits program including medical, dental, and vision insurance; a 401(k) program with employer match; paid vacation and sick leave; employer-paid basic life and AD&D insurance; an Employee Assistance Program; and a flexible work environment. Additionally, employees can choose from several voluntary benefits including critical illness coverage; accident insurance; identity theft coverage; pet insurance, and more.

The Enterprise Systems Engineering Subject Matter Expert (SME) serves as the senior technical authority responsible for the architecture, engineering, implementation, security, administration, and lifecycle management of the organization's Microsoft Windows Server infrastructure, Microsoft SQL Server database platforms, Active Directory services, and enterprise network services. This role requires deep, hands-on expertise in Microsoft SQL Server and Active Directory.

This role provides technical leadership in designing, deploying, securing, and optimizing Qatar Armed Forces’ (QAF) mission-critical enterprise systems that support organizational operations. The SME ensures availability, integrity, performance, resiliency, and security of core infrastructure services, including Active Directory, Microsoft SQL Server, DNS, DHCP, messaging systems, backup and recovery, and certificate services. The position is responsible for proactively identifying operational risks, implementing corrective actions, and maintaining compliance with organizational cybersecurity policies and industry best practices.

In addition to technical leadership, the SME serves as the primary engineering advisor and mentor to customers and operational personnel. The role provides technical guidance, knowledge transfer, and hands-on training to develop customer proficiency in the administration, operation, troubleshooting, and sustainment of enterprise systems.

This position is based in Doha, Qatar, and is performed within a Qatar Emiri Signal Corps (QESC) military installation, providing direct support to the host-nation military. This role is not located within a U.S. military installation. Occasional travel to remote operational sites may be required to perform system installation, maintenance, or troubleshooting activities outside of normal business hours.

PRIMARY DUTIES AND RESPONSIBILITIES

Active Directory & Identity Management: Administer an Active Directory forest, including domain controller health, replication, trust relationships, FSMO roles, and forest/domain functional levels.

• Design, implement, and maintain Group Policy Objects (GPOs) to enforce security baselines, configuration standards, and compliance requirements across the domain hierarchy.
• Manage user, group, and computer objects, organizational unit structure, and delegation of administrative rights.
• Administer DNS zones and records supporting the AD environment, including forward/reverse lookup zones and integration with Active Directory-integrated DNS.
• Manage DHCP scopes, reservations, and failover configuration to support reliable IP address allocation across the network.
• Maintain the internal Certificate Authority (CA), including certificate templates, issuance, renewal, and revocation for internal services and endpoints.

SQL Server Administration: Administer Microsoft SQL Server 2019 instances supporting business-critical applications, including installation, configuration, and version/patch management.

• Design and maintain backup, restore, and disaster recovery strategies for SQL databases, including full, differential, and transaction log backup schedules.
• Monitor and tune database performance, including indexing strategy, query performance, and resource utilization.
• Manage SQL Server security, including logins, roles, permissions, and encryption, in alignment with organizational security policy.
• Perform routine database maintenance tasks (integrity checks, index maintenance, statistics updates) and troubleshoot database-related incidents.

Messaging & Collaboration: Administer Microsoft Exchange Server 2019, including mailbox databases, transport rules, connectors, and mail flow troubleshooting.

• Monitor Exchange server health, storage capacity, and certificate bindings, and manage recipient and distribution group configuration.

File Services & Storage: Administer the Windows File Server environment including Distributed File System (DFS) namespaces and replication, ensuring data availability and consistency across sites.

• Manage file share permissions, quotas, and storage capacity planning.

Backup, Recovery & Patch Management: Administer Veeam Backup & Replication 12 to ensure reliable backup jobs, replication, and recoverability of virtual machines and critical systems.

• Perform regular backup verification, restore testing, and disaster recovery exercises.
• Manage Windows Server Update Services (WSUS) to ensure timely, controlled deployment of security patches and updates across servers and workstations.

General Systems Administration: Monitor overall system health, capacity, and security posture across the Windows Server 2019 environment.

• Document system configurations, standard operating procedures, and troubleshooting guides in accordance with company documentation standards.
• Evaluate, recommend, and implement improvements to infrastructure, automation, and systems.

MINIMUM QUALIFICATIONS

• U.S. DoD Security Clearance: Secret
• Priority: Demonstrated, advanced hands-on expertise in Microsoft SQL Server and Microsoft Active Directory administration, including architecture, deployment, security hardening, backup and recovery, high availability, disaster recovery, troubleshooting, and lifecycle management.
• Minimum 10 years of progressively responsible experience administering enterprise Microsoft Windows Server environments, including extensive experience with Microsoft SQL Server 2019 (or later) and Active Directory. Experience supporting multi-domain and multi-forest environments is highly preferred.
• Expert knowledge of enterprise Active Directory services, including domain architecture, Group Policy Objects (GPOs), DNS, DHCP, Kerberos authentication, trusts, replication, and identity management.
• Experience deploying, administering, and maintaining Microsoft Exchange Server 2019 (or a comparable enterprise messaging platform), including high availability, security, and operational support.
• Experience administering Windows File Services, including Distributed File System (DFS), DFS Replication (DFS-R), and file server management in enterprise environments.
• Experience managing Microsoft Public Key Infrastructure (PKI), including Certificate Authorities (CA), certificate enrollment, renewal, revocation, and lifecycle management.
• Experience administering Windows Server Update Services (WSUS) to ensure timely deployment of operating system and application updates.
• Experience implementing and managing enterprise backup and recovery solutions, such as Veeam Backup & Replication or comparable technologies.
• Advanced proficiency in PowerShell scripting for systems automation.
• Experience with enterprise virtualization platforms, including VMware vSphere, Hyper‑V.
• Strong analytical, troubleshooting, and problem-solving skills with the ability to diagnose and resolve complex enterprise infrastructure issues in mission-critical environments.
• Demonstrated ability to produce clear, accurate, and comprehensive technical documentation, including system design documents, standard operating procedures, and implementation guides.
• Mentoring, coaching, and knowledge transfer experience, with the ability to educate customers and operational personnel on enterprise systems administration and sustainment procedures.
• Experience operating within military or mission-critical environments requiring adherence to strict security policies, operational procedures, and chain-of-command protocols.
• Experience supporting or working alongside foreign military organizations is highly desirable.
• Experience working in regional conflict or threat environments while maintaining mission continuity, operational readiness, and compliance with established security procedures is highly desirable.
• Must possess a valid driver’s license and be able to operate company vehicles.
• Certification: Microsoft Windows Server Hybrid Administrator, or equivalent.

We are an Equal Opportunity/VEVRAA federal contractor. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status, or any other characteristic protected by law.

We offer a best-in-class benefits program including medical, dental, and vision insurance; a 401(k) program with employer match; paid vacation and sick leave; employer-paid basic life and AD&D insurance; an Employee Assistance Program; and a flexible work environment. Additionally, employees can choose from several voluntary benefits including critical illness coverage; accident insurance; identity theft coverage; pet insurance, and more.

We give preference to internal candidates. If no internal candidate meets our qualifications, external candidates will be given consideration.