The Systems Engineer is primarily responsible for the administration and operation of the firm’s complex Microsoft 365 services with primary focus on core platforms like Email, Power Platform, Identity and MS Entra ID Infrastructure setup. This role requires in-depth knowledge of MS Exchange on-prem and online, Active Directory, Mimecast, PowerShell and a good understanding of Entra connect, Entra AD Conditional Access and other related O365 technologies (SPO, Teams, One Drive, etc.). The ideal candidate is expected to be skilled at troubleshooting, be a self-starter, and demonstrate experience in managing projects to completion.
Job Responsibilities:
- Exchange On-Prem and Exchange Online Administration
- Ensure email services are stable, secure, and available across various Business Units (BU’s) at Arch:
- Installing Exchange and setting up Exchange orgs from scratch or upgrading from MS Exchange 2013 to 2016 to 2019 .
- Support multiple Hybrid Exchange environments syncing to one Multi Geo O365 tenant.
- Perform mailbox data migrations during Merger and acquisition or internal transfer of employees.
- Develop strategic plans for Mail flow routing, Journaling, Email retention policies, Role based access control, etc.
- Support merger and acquisitions to lead complex Exchange, O365 tenant and AD integrations/migrations.
- Troubleshooting complex Mail flow scenarios to resolve P1/P2 tickets across various technologies.
- Review and suggest strategic improvements
- Active Directory
- Plan and Deploy AD Sites and Services, Promote/Demote Domain Controllers
- AD user migration using ADMT and Quest
- Support Multiple AD forests and trust between them
- Automate AD health checks, Identity Lifecyle management, etc.
- Setup, configure and administer Quest Change auditor
- Setup and review AD health assessments to remediate any Vulnerabilities
- Setup and support Active Directory Certificate Services.
- Troubleshoot AD replication and Entra connect sync issues
- O365/Entra AD
- Setup and troubleshoot Entra Conditional access policies
- Configure Privileged Identity Manager to administer various AAD Roles
- Create enterprise apps to setup SSO with third party vendors.
- Setup Multifactor Authentication
- Assign/reassign various O365 licenses and enable relevant services within the O365 licenses
- Create and manage service principals and OAuth app registrations
- Email Gateway (Mimecast) Administration:
- Build new Mimecast tenant with standard gateway configuration.
- Develop and manage email gateway policies
- Work in co-ordination with Mimecast and corporate information security to improve security posture.
- Document standards and schedule KT sessions with service desk teams.
- Automation
- Develop PowerShell scripts to help automate routine tasks, monitor and generate reports on various workloads (EXO, Azure AD, Teams, SPO, O365 licensing, etc.).
- Working experience with GitHub and YAML configuration.
- Terraform experience a plus
- Develop processes and procedures to ensure managed environments maintain the highest levels of availability, security, and quality.
- Follow all set procedures to the change management system
- Develop capacity forecasts for managed environments and prevent problems prior to outages
- Serve as an escalation point and provide guidance and direction for the resolution of escalated issues and/or complex production, application or system problems
- Must be able to accommodate schedule flexibility to deal with escalations and occasional changes during non-core business hours
