Senior Microsoft Infrastructure & Exchange Engineer

Role overview

Messaging and infrastructure responsibilities

• Install, configure, administer, upgrade, patch, and secure Exchange Server 2019; maintain Exchange hybrid configuration, free/busy, cross-premises mail flow, and directory synchronisation.
• Migrate mailboxes between on-premises Exchange and Exchange Online using zero-data-loss cutovers and tested rollback plans.
• Manage mailboxes, distribution and shared mailboxes, transport rules, connectors, mail flow, and certificate lifecycle.
• Design and maintain Database Availability Groups; test failover and monitor quorum health.
• Troubleshoot mail delivery, queues, performance, and availability using message tracking, protocol logs, and transport diagnostics.
• Administer Active Directory, domain services, sites, trusts, OU design, delegation, authentication, permissions, Group Policy, DNS, and DHCP.
• Maintain AD replication, privileged-account security, directory backups, recovery runbooks, and tested restores.
• Administer email-security gateway controls, sender authentication, mail routing, threat protection, and phishing investigations.
• Troubleshoot network issues affecting mail flow, hybrid connectivity, and authentication; administer Microsoft 365, Entra ID, SSO, conditional access, and application registrations.
• Build PowerShell automation and maintain monitoring, backup, disaster recovery, patching, runbooks, topology, and infrastructure documentation.
• Provide senior escalation, follow security and change procedures, and contribute to departmental and individual KPIs.

Education, experience, and languages

• Arabic native proficiency and English at professional working proficiency are required.
• A bachelor's degree in Computer Science, Information Technology, or a related field is required; equivalent experience with strong certification may substitute.
• The fully-fledged senior profile calls for 8+ years in enterprise Microsoft infrastructure, including 5+ hands-on years with Exchange Server 2016/2019 on-premises and Exchange hybrid with Microsoft 365.
• Experience should include a mid-to-large multi-site enterprise environment, ownership of a full Exchange migration, and a DAG deployment.
• The description also allows a mid-senior entrant with 6+ years and strong Active Directory, Entra ID, and Microsoft 365 depth through a structured development pathway.

Technical competencies and certifications

• Exchange Server 2019 on-premises, hybrid, and DAG expertise; Exchange migrations, mail flow, connectors, and certificates.
• Advanced Active Directory and Group Policy; DNS/DHCP; email security and SPF/DKIM/DMARC; Microsoft 365, Entra ID, SSO, and conditional access.
• PowerShell automation; TCP/IP, firewalls, VPN, VLAN, and NAT; backup, disaster recovery, patching, and infrastructure documentation.
• MCSE Messaging or Server Infrastructure (or legacy MCITP Enterprise Messaging) is strongly preferred; Microsoft 365, identity, and Windows Server hybrid certifications are preferred.
• Email-security vendor, networking, and security-baseline certifications are nice to have.

Continuity and operating arrangements

• Maintain, test, and document DAG failover, Active Directory recovery, and Exchange/Microsoft 365 restore procedures; support business-impact analysis and continuity exercises.
• Communicate infrastructure-change impacts on business continuity and report continuity risks to IT management.
• Based in Riyadh, with on-site and hybrid working arrangements under organisational policy.
• Standard working hours with flexibility for business needs; participate in an on-call rotation for critical incidents.
• Execute major changes in approved maintenance windows with change-management sign-off and follow information-security, data-handling, and privileged-access controls.