Senior Microsoft Infrastructure & Exchange Engineer

About the Role

Key Responsibilities

• Install, configure, administer, and upgrade Microsoft Exchange Server 2019 on-premises, including applying cumulative updates and security patches.
• Maintain Exchange Hybrid with Microsoft 365, managing configuration, free/busy, cross-premises mail flow, and directory synchronization.
• Execute mailbox migrations between on-premises and Exchange Online with zero data loss and tested rollback plans.
• Manage mailbox lifecycle, distribution and shared mailboxes, mail flow, transport rules, connectors, and certificate lifecycle.
• Design, build, and maintain Database Availability Groups (DAG) for Exchange high availability, including failover testing.
• Perform advanced Active Directory administration, including domain services, sites, trusts, OU design, delegation, and permissions.
• Design, implement, troubleshoot, and optimize Group Policy Objects (GPO).
• Administer and maintain DNS and DHCP infrastructure services.
• Manage AD replication health, security hardening, and disaster recovery readiness.
• Administer enterprise email security solutions, including anti-spam, anti-phishing, malware protection, and content filtering.
• Manage sender authentication (SPF, DKIM, DMARC) and investigate email-borne threats.
• Apply networking knowledge (TCP/IP, DNS, routing, firewalls, VPNs) to ensure messaging and identity security and reachability.
• Administer Microsoft 365, Entra ID (Azure AD), and Single Sign-On (SSO), coordinating with Information Security.
• Develop and maintain PowerShell scripting and automation for provisioning, reporting, and bulk operations.
• Provide senior-level escalation support for messaging, identity, and email security incidents.
• Maintain technical documentation, standard operating procedures, and as-built diagrams.
• Ensure messaging and identity business continuity/disaster recovery plans meet requirements, including periodic testing of DAG failover and AD recovery procedures.

Qualifications and Experience

• Bachelor's degree in Computer Science, Information Technology, or a related field. Equivalent experience with strong certification is acceptable.
• For a senior role, 8+ years of experience in enterprise Microsoft infrastructure, with 5+ years hands-on with Exchange Server (2016/2019) on-premises and Exchange hybrid with Microsoft 365 in a mid-to-large, multi-site enterprise environment. This includes experience with a full Exchange migration and DAG deployment.
• A strong mid-senior Saudi national with 6+ years of experience and depth in Active Directory / Entra ID / Microsoft 365, with a commitment to mastering on-premises Exchange, is encouraged to apply and will be supported through a structured certification ramp.
• Certifications
• Strongly preferred: MCSE: Messaging or MCSE: Server Infrastructure (or legacy MCITP: Enterprise Messaging).
• Preferred: Microsoft 365 Certified: Messaging Administrator Associate (MS-203); Enterprise Administrator Expert (MS-102); Identity and Access Administrator (SC-300); Windows Server Hybrid Administrator (AZ-800/AZ-801).
• Nice-to-have: Email security vendor certification (Proofpoint / Mimecast / Microsoft Defender for Office 365), a networking certification (CCNA-level), and a security baseline (SC-900 / Security+).
• Work Arrangement
• This role is based in Riyadh, with on-site and hybrid working arrangements in line with organizational policy. Standard working hours apply, with flexibility to support business needs. The position involves participation in an on-call rotation for critical messaging, identity, and email security incidents, including outside standard working hours. Major changes are executed within approved maintenance windows, typically outside peak hours, with change-management sign-off. Adherence to information security, data-handling, and privileged-access controls is required.
• Performance Indicators
• Maintain high availability of messaging services and prevent outages through timely certificate management and patching.
• Respond to critical messaging and identity incidents within agreed targets, restore services promptly, and document root causes.
• Deliver mailbox migration waves on schedule with zero data loss and tested rollbacks.
• Keep systems patched in line with approved security baselines and remediate critical vulnerabilities within required timeframes.
• Ensure email security with SPF/DKIM/DMARC at enforcement, measured by reduction in delivered phishing/spam with a controlled false-positive rate.
• Periodically test business continuity and disaster recovery procedures, documenting successful recovery tests.
• Maintain current technical runbooks and infrastructure documentation for all owned services.