Job Description

Roles & Responsibilities

• Design, implement, and manage enterprise-level messaging and collaboration platforms (e.g., Microsoft Exchange, Office 365, Google Workspace).
• Ensure the high availability, performance, and security of messaging systems through proactive monitoring, tuning, and patching.
• Develop and maintain robust disaster recovery and business continuity plans for critical messaging infrastructure.
• Troubleshoot and resolve complex technical issues related to email flow, calendaring, presence, and related services.

Desired Candidate Profile

• 4–7 years in Microsoft infrastructure environments

  Experience in vulnerability management and patching

  Experience in Hybrid Exchange and Entra ID environments

  Good communication and coordination skills

  Experience in large enterprise or banking environments

  Exposure to regulatory and audit frameworks

  Preferred Certifications

  Microsoft Azure / Windows Server / Security certifications

  1. Vulnerability Management (Primary Focus)

  • Manage end-to-end vulnerability lifecycle using Qualys, Microsoft Defender.

  • Analyze findings across Domain Controllers, Exchange, Windows Servers, and Entra ID.

  • Prioritize remediation based on CVSS, exploitability, and business impact.

  • Ensure remediation within SLA timelines.

  • Provide risk acceptance and compensating controls.

  • Generate audit-ready reports and dashboards.

  1. Patch Management & Security Updates

  • Responsible for patching AD Domain Controllers, Exchange Servers, Hybrid components, and Windows Servers.

  • Deploy Windows patches, Exchange SU/CU, and emergency updates.

  • Ensure minimal downtime patching strategies.

  1. Entra ID & Hybrid Identity Security

  • Manage Entra ID and Azure AD Connect.

  • Monitor identity sync and authentication methods.

  • Remediate identity vulnerabilities and MFA/CA misconfigurations.

  • Ensure secure hybrid identity posture.

  1. Hybrid Exchange Management

  • Manage hybrid mail flow and configuration.

  • Ensure continuity of services like Free/Busy and Autodiscover.

  • Troubleshoot hybrid mail routing and authentication issues.

  1. Pre-Patching Risk & Impact Assessment

  • Review CVEs, advisories, and dependencies.

  • Perform impact analysis on authentication and messaging.

  • Validate backup and rollback strategies.

  1. Secure Patch Deployment

  • Execute patching via CAB approvals.

  • Perform rolling DC patching and DAG-based Exchange patching.

  • Ensure no service disruption.

  1. Post-Patching Validation & Hardening

  • Validate AD, Exchange, and Entra ID health.

  • Monitor logs and alerts.

  • Perform re-scans and implement hardening measures.

  1. Security Compliance & Audit

  • Ensure compliance with PCI-DSS / ISO standards.

  • Maintain remediation evidence and reports.

  • Support audits and regulatory assessments.

  1. Automation & Reporting

  • Develop PowerShell automation.

  • Automate vulnerability tracking and reporting.

  • Prepare dashboards and metrics.

  1. On-Call Support

  • Actively participate in 24x7 On-Call rotation, providing support for critical incidents.

  • Ensure timely resolution of production issues and service restoration .