Exchange Engineer II

Exchange Engineer II is responsible for the architecture, administration, security, and operational health of the organization's enterprise messaging platform. This role owns Microsoft Exchange services across on-premises, Exchange Online, and hybrid deployments, ensuring high availability, secure mail flow, regulatory compliance, and an excellent end-user experience. The engineer serves as a subject-matter expert for messaging technologies, providing Tier 3 operational support, leading migrations and upgrades, automating administrative workflows, and partnering closely with Security, Identity, Infrastructure, and IT Service Teams to deliver a reliable and resilient email platform. Major Responsibilities Exchange Platform Engineering & Operations

• Design & Administration: Architect, deploy, and maintain Microsoft Exchange environments, including Exchange Online, on-prem Exchange, and hybrid configurations.
• Mailbox Management: Administer mailboxes, shared mailboxes, distribution groups, Microsoft 365 Groups, mail contacts, and mail-enabled security groups.
• Mail Flow & Connectivity: Configure and support mail flow, connectors, accepted domains, transport rules, and routing between internal and external systems.
• Platform Availability: Monitor Exchange service health, performance, and availability; implement capacity planning and initiative-taking remediation strategies.
• Hybrid Integration: Support hybrid identity and messaging integrations between on-prem Active Directory/Exchange and Microsoft 365.

Troubleshooting & Support

• Incident Response: Diagnose and resolve complex email delivery issues, outages, latency problems, mailbox access failures, and calendar/free-busy issues.
• Tier 3 Escalations: Function as the highest technical escalation point for messaging-related incidents originating from the service desk or infrastructure teams.
• Root Cause Analysis: Perform post-incident analysis and implement preventative controls to reduce recurrence.
• Threat Protection: Configure and maintain spam filtering, anti-phishing, malware protection, and email hygiene controls using Defender for Office 365 or third-party platforms (e.g., Proofpoint, Mimecast).
• Compliance Controls: Implement and manage retention policies, litigation holds, journaling, eDiscovery, DLP, and audit logging.
• Identity & Permissions: Partner with identity teams to enforce least-privilege access, role-based administration (RBAC), and strong authentication.
• DNS & Certificates: Own DNS records related to email services and configure SPF, DKIM, DMARC; manage SSL/TLS certificates used in mail flow and hybrid configurations.

Migrations, Upgrades & Automation

• Messaging Migrations: Lead mailbox migrations, tenant-to-tenant moves, and upgrades from on-prem Exchange to Exchange Online.
• Change Management: Plan and execute platform changes with minimal business impact, following formal change control processes.
• Automation: Develop and maintain PowerShell automation for provisioning, reporting, compliance tasks, and operational efficiencies.

Messaging Resiliency & Continuity

• Backup & Recovery: Support backup, recovery, and continuity strategies for messaging systems in alignment with enterprise DR standards.
• Business Continuity: Partner with infrastructure teams to ensure messaging services meet RTO/RPO requirements.

Documentation & Collaboration

• Operational Documentation: Maintain architecture diagrams, configuration documentation, runbooks, and support procedures.

• Cross-Team Partnerships: Collaborate closely with Security, Infrastructure, Microsoft 365, and Help Desk teams to ensure cohesive service delivery.

• Audits & Reviews: Provide documentation and evidence to support internal and external audits as required.

Do you have experience in TLS?, Do you have a Master's degree?, Required: Bachelor's degree in IT, Computer Science, or a related field (or equivalent experience) Desired: Masters's degree in IT, Computer Science, or related field Work Experience

• Required: 5+ years administering Microsoft Exchange environments in a mid-to-large enterprise, including Exchange Online and hybrid deployments.
• Desired: Experience supporting regulated environments (e.g., healthcare, pharmaceutical, finance) and compliance-driven messaging controls.

Skills/Knowledge

• Required: Expert-level knowledge of Microsoft Exchange (Online and on-prem), Exchange hybrid architecture, and mail flow design. Strong experience with email security platforms and Microsoft Defender for Office 365. Deep understanding of SMTP, DNS, SPF, DKIM, DMARC, and TLS. Proficiency with PowerShell for automation, reporting, and troubleshooting. Working knowledge of Active Directory, Entra ID (Azure AD), authentication, and RBAC.
• Desired: Experience with tenant-to-tenant migrations and complex coexistence scenarios. Familiarity with Microsoft Purview compliance capabilities. Exposure to Zero Trust and modern identity security models

Licenses/Certifications

• Required: Microsoft Certified: Messaging Administrator Associate (or equivalent experience)
• Desired: Microsoft Certified: Security Administrator (SC-200)

3.43.4 out of 5 stars 13410 Eastpoint Centre Dr Ste 101, Louisville, KY 40223 From $84,000 a year, Pulled from the full job description

• Referral program
• Tuition reimbursement
• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance
• Dental insurance, We offer a competitive salary starting at $84K and company benefits!, * Medical, Dental & Vision insurance
• 401k with a match
• Paid Time Off and Paid Holidays
• Tuition Reimbursement
• Paid Volunteer Day
• Floating Holiday
• Referral Incentive
• Paid Life, and short & long-term disability insurance