Sr. Microsoft 365 & Azure Exchange Engineer

JPG Infotech LLC is seeking a Hands-On Senior Microsoft 365 & Azure Exchange Engineer to architect, migrate, and secure enterprise messaging infrastructures on an active Federal contract. In this role, you will own the end-to-end administration and modernization of Exchange Online and Hybrid Exchange environments, tightly integrated with Microsoft Entra ID (formerly Azure AD) and federal cloud security controls.

You will act as the technical subject matter expert for email flow, messaging security, identity synchronization, and tenant migrations-ensuring high availability and strict adherence to federal compliance standards (including GCC/GCC High environments).

Key Responsibilities1. Exchange Online & Hybrid Messaging Architecture

• Platform Administration: Design, deploy, and administer enterprise-scale Microsoft 365 Exchange Online and Hybrid Exchange server environments.
• Mail Flow & Routing: Configure and troubleshoot complex SMTP mail routing, connectors, accepted domains, and hybrid mail flow between on-premises Exchange servers and cloud tenants.
• Mailbox & Transport Management: Oversee mailbox migrations, shared mailboxes, distribution groups, resource scheduling, and transport rules at enterprise scale.

1. Azure / Entra ID Identity & Messaging Security * Identity Synchronization: Manage Microsoft Entra ID Connect (Azure AD Connect) for user provisioning, directory synchronization, and secure authentication across hybrid environments. * Email Security: Implement and maintain robust email authentication protocols-including SPF, DKIM, and DMARC-to prevent domain spoofing and phishing attacks. * Threat Protection: Configure Microsoft Defender for Office 365 (formerly EOP/ATP) policies, including Safe Attachments, Safe Links, anti-spam, and anti-phishing controls.

2. Compliance, Governance & Data Protection * Federal Compliance: Align messaging architectures with federal regulatory frameworks (FedRAMP, NIST SP 800-53, FISMA) within Microsoft GCC or GCC High government clouds. * Information Governance: Implement Microsoft Purview policies for Data Loss Prevention (DLP), eDiscovery, retention policies, litigation holds, and messaging auditing.

3. Migration, Automation & Level-3 Engineering * Data Migration: Lead complex tenant-to-tenant or on-premises-to-cloud email migrations using native Microsoft tools or third-party migration suites (e.g., Quest, BitTitan). * Automation: Develop robust PowerShell scripts to automate bulk mailbox operations, compliance reporting, identity management, and routine administrative tasks. * Escalation Support: Serve as the Level-3 escalation point for critical messaging outages, mail delivery failures, and complex authentication issues.

• Citizenship: Must be a U.S. Citizen (dual citizenship or non-citizen status cannot be accommodated due to federal contract mandates).
• Clearance: Ability to pass a federal background investigation and obtain/maintain a Public Trust or Secret clearance.
• Location: Preference for candidates residing in the Washington, D.C. Metropolitan Area (DC/MD/VA) with flexibility for hybrid on-site collaboration.

Experience & Technical Skills

• Experience: 5+ years of hands-on systems engineering experience specializing in enterprise messaging, Microsoft 365, and Azure identity infrastructure.
• Core Technologies:
• Deep expertise in Microsoft Exchange Online and Exchange Server (2016/2019) in hybrid configurations.
• Strong working knowledge of Microsoft Entra ID (Azure AD), Conditional Access policies, Multi-Factor Authentication (MFA), and directory synchronization.
• Advanced understanding of DNS records related to messaging (MX, SPF, DKIM, DMARC).
• Scripting & Automation: Strong practical proficiency in PowerShell scripting for Microsoft 365 and Exchange Online automation.

Preferred Qualifications

• Certifications:
• Microsoft 365 Certified: Administrator Expert (MS-102)
• Microsoft 365 Certified: Messaging Administrator Associate (MS-203 legacy equivalent)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Government Cloud: Prior hands-on engineering experience within Microsoft GCC, GCC High, or DoD cloud environments.
• Enterprise Migrations: Proven track record executing large-scale email platform migrations (e.g., Lotus Notes, Google Workspace, or legacy Exchange to M365).
• Framework Knowledge: Understanding of CISA BOD 18-01 / BOD 20-01 federal email security directives.

Pulled from the full job description

• 401(k)
• Health insurance
• Retirement plan
• 401(k) matching
• Paid time off, * 401(k)
• 401(k) matching
• Health insurance
• Paid time off
• Retirement plan