Offer summary

Qualifications:

Minimum of 5 years of experience supporting Microsoft Exchange On-Prem and Exchange Online., 5+ years of experience managing and troubleshooting email gateway solutions, preferably Mimecast., Strong PowerShell automation skills and advanced Active Directory experience are essential., Knowledge of Azure AD, Conditional Access, MFA, and O365 licensing is required..

Key responsabilities:

Administer Exchange environments, ensuring stability and security across business units.

Plan and deploy Active Directory services, including user migrations and health assessments.

Develop and manage email gateway policies and coordinate with security teams.

Automate routine tasks using PowerShell and develop processes to maintain high availability and security.

Job description

Job Description:

• Exchange On-Prem and Exchange Online Administration
o Ensure email services are stable, secure, and available across various Business Units (BU’s) at Arch:
o Installing Exchange and setting up Exchange orgs from scratch or upgrading from MS Exchange 2013 to 2016 to 2019 .
o Support multiple Hybrid Exchange environments syncing to one Multi Geo O365 tenant.
o Perform mailbox data migrations during Merger and acquisition or internal transfer of employees.
o Develop strategic plans for Mail flow routing, Journaling, Email retention policies, Role based access control, etc.
o Support merger and acquisitions to lead complex Exchange, O365 tenant and AD integrations/migrations.
o Troubleshooting complex Mail flow scenarios to resolve P1/P2 tickets across various technologies.
o Review and suggest strategic improvements

• Active Directory
o Plan and Deploy AD Sites and Services, Promote/Demote Domain Controllers
o AD user migration using ADMT and Quest
o Support Multiple AD forests and trust between them
o Automate AD health checks, Identity Lifecyle management, etc.
o Setup, configure and administer Quest Change auditor
o Setup and review AD health assessments to remediate any Vulnerabilities
o Setup and support Active Directory Certificate Services.
o Troubleshoot AD replication and Entra connect sync issues

• O365/Entra AD
o Setup and troubleshoot Entra Conditional access policies
o Configure Privileged Identity Manager to administer various AAD Roles
o Create enterprise apps to setup SSO with third party vendors.
o Setup Multifactor Authentication
o Assign/reassign various O365 licenses and enable relevant services within the O365 licenses
o Create and manage service principals and OAuth app registrations

• Email Gateway (Mimecast) Administration:
o Build new Mimecast tenant with standard gateway configuration.
o Develop and manage email gateway policies
o Work in co-ordination with Mimecast and corporate information security to improve security posture.
o Document standards and schedule KT sessions with service desk teams.

• Automation
o Develop PowerShell scripts to help automate routine tasks, monitor and generate reports on various workloads (EXO, Azure AD, Teams, SPO, O365 licensing, etc.).
o Working experience with GitHub and YAML configuration.
o Terraform experience a plus
• Develop processes and procedures to ensure managed environments maintain the highest levels of availability, security, and quality.
• Follow all set procedures to the change management system
• Develop capacity forecasts for managed environments and prevent problems prior to outages
• Serve as an escalation point and provide guidance and direction for the resolution of escalated issues and/or complex production, application or system problems
• Must be able to accommodate schedule flexibility to deal with escalations and occasional changes during non-core business hours

Required Skills/Experience
• A minimum of 5 years of relevant experience supporting Microsoft Exchange On-Prem and Exchange Online
• 5+ years of relevant practical experience managing/troubleshooting email Gateway solutions, Mimecast preferred.
• 5+ years of strong PowerShell automation and advanced active directory experience
• Knowledge of Kerberos, LDAP, Active Directory, ADFS, DNS, DHCP.
• Very good knowledge of Azure AD, Conditional Access, MFA, O365 licensing etc.
• Expert knowledge of Windows servers, Active Directory, ADFS, GPOs in a Windows Server 2012 R2 and 2016 environment
Desired Skills/Experience
• Ability to effectively plan, facilitate, and participate in meetings with employees from all organizational levels
• Effectively use teamwork to contribute to a high morale/high-performance team culture, leading by example
• Demonstrate the ability to work in an open way, willingness to share knowledge and resources and to educate others within a global team
• Effective team player and collaborator
• Strong skills in prioritization and reprioritization to react to a dynamic environment as Arch continues to evolve
• Excellent interpersonal and communication skills, including strong listening skills
• Ability to effectively communicate business and technical information to audiences with varying backgrounds
• Ability to communicate with offshore teams and technical development teams
• Good documentation and presentation skills
• Ability to interact with management in a professional manner
Education
• Technical degree or certifications preferred but not required
• Industry specific training or designation a plus

Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.

Required profile