Exchange Engineer II

Onco360•Louisville, KY

3d•Onsite

About The Position

Exchange Engineer II is responsible for the architecture, administration, security, and operational health of the organization’s enterprise messaging platform. This role owns Microsoft Exchange services across on‑premises, Exchange Online, and hybrid deployments, ensuring high availability, secure mail flow, regulatory compliance, and an excellent end‑user experience. The engineer serves as a subject-matter expert for messaging technologies, providing Tier 3 operational support, leading migrations and upgrades, automating administrative workflows, and partnering closely with Security, Identity, Infrastructure, and IT Service Teams to deliver a reliable and resilient email platform.

Requirements

Bachelor's degree in IT, Computer Science, or a related field (or equivalent experience)
5+ years administering Microsoft Exchange environments in a mid-to-large enterprise, including Exchange Online and hybrid deployments.
Expert-level knowledge of Microsoft Exchange (Online and on-prem), Exchange hybrid architecture, and mail flow design.
Strong experience with email security platforms and Microsoft Defender for Office 365.
Deep understanding of SMTP, DNS, SPF, DKIM, DMARC, and TLS.
Proficiency with PowerShell for automation, reporting, and troubleshooting.
Working knowledge of Active Directory, Entra ID (Azure AD), authentication, and RBAC.
Microsoft Certified: Messaging Administrator Associate (or equivalent experience)

Nice To Haves

Masters’s degree in IT, Computer Science, or related field
Experience supporting regulated environments (e.g., healthcare, pharmaceutical, finance) and compliance-driven messaging controls.
Experience with tenant‑to‑tenant migrations and complex coexistence scenarios.
Familiarity with Microsoft Purview compliance capabilities.
Exposure to Zero Trust and modern identity security models
Microsoft Certified: Security Administrator (SC‑200)

Responsibilities

Architect, deploy, and maintain Microsoft Exchange environments, including Exchange Online, on-prem Exchange, and hybrid configurations.
Administer mailboxes, shared mailboxes, distribution groups, Microsoft 365 Groups, mail contacts, and mail-enabled security groups.
Configure and support mail flow, connectors, accepted domains, transport rules, and routing between internal and external systems.
Monitor Exchange service health, performance, and availability; implement capacity planning and initiative-taking remediation strategies.
Support hybrid identity and messaging integrations between on‑prem Active Directory/Exchange and Microsoft 365.
Diagnose and resolve complex email delivery issues, outages, latency problems, mailbox access failures, and calendar/free‑busy issues.
Function as the highest technical escalation point for messaging-related incidents originating from the service desk or infrastructure teams.
Perform post‑incident analysis and implement preventative controls to reduce recurrence.
Configure and maintain spam filtering, anti-phishing, malware protection, and email hygiene controls using Defender for Office 365 or third‑party platforms (e.g., Proofpoint, Mimecast).
Implement and manage retention policies, litigation holds, journaling, eDiscovery, DLP, and audit logging.
Partner with identity teams to enforce least‑privilege access, role‑based administration (RBAC), and strong authentication.
Own DNS records related to email services and configure SPF, DKIM, DMARC; manage SSL/TLS certificates used in mail flow and hybrid configurations.
Lead mailbox migrations, tenant‑to‑tenant moves, and upgrades from on-prem Exchange to Exchange Online.
Plan and execute platform changes with minimal business impact, following formal change control processes.
Develop and maintain PowerShell automation for provisioning, reporting, compliance tasks, and operational efficiencies.
Support backup, recovery, and continuity strategies for messaging systems in alignment with enterprise DR standards.
Partner with infrastructure teams to ensure messaging services meet RTO/RPO requirements.
Maintain architecture diagrams, configuration documentation, runbooks, and support procedures.
Collaborate closely with Security, Infrastructure, Microsoft 365, and Help Desk teams to ensure cohesive service delivery.
Provide documentation and evidence to support internal and external audits as required.