Exchange & Security Administrator, AVP

State Street•Quincy, MA

7d•$90,000 - $157,500•Onsite

About The Position

State Street is looking for an M365 Exchange & Security Engineer to become part of our Collaboration Services team in Boston. The role will help deliver the Collaboration Services roadmap, modernize mail flow and threat-protection capabilities, strengthen operational resilience and provide support for business and technical users of these services. Working with the tower lead, architects, engineers, operations teams and key control partners, the engineer will be responsible for requirements gathering, solution engineering, implementation, documentation and advanced support across Exchange and email security.

Requirements

Deep hands-on engineering and support experience with Exchange Online and Exchange hybrid or on-premises environments, including transport, connectors, mail routing, certificates, TLS, RBAC, mailbox management and troubleshooting.
Strong experience with Microsoft Defender for Office 365 and enterprise email security controls, including threat policies, investigation, quarantine and mail-flow protection.
Experience designing and supporting integrations between Exchange, Microsoft Purview, Microsoft Defender for Office 365 and third-party email security, DLP, archive or encryption platforms.
Strong PowerShell skills for Exchange Online and Microsoft 365 engineering and administration; experience with Microsoft Graph, APIs, Power Automate or Python is beneficial.
Practical knowledge of Microsoft Entra ID, authentication, Conditional Access, enterprise applications, service principals, privileged access and least-privilege design.
Working knowledge of Microsoft Purview capabilities relevant to email, including Message Encryption, sensitivity labels, DLP, retention, eDiscovery and Audit.
Experience with Microsoft 365 security and compliance controls in a large, regulated enterprise, including audit evidence, control testing, change management and risk remediation.
Ability to troubleshoot complex end-to-end issues across cloud services, hybrid infrastructure, identity, networking, DNS, certificates and third-party integrations.
Experience with service monitoring, incident management, problem management, change implementation, testing and operational readiness.
Ability to work independently, lead technical workstreams and collaborate effectively with engineers, operations teams, control partners and vendors.
Detailed and organised critical thinker with strong problem-solving skills and a focus on service resilience, security and supportability.
Effective verbal and written communication skills, including the ability to explain technical risks, options and recommendations clearly.

Nice To Haves

Experience with Exchange Online, Microsoft Defender and Microsoft Purview

Responsibilities

Engineer, configure and support Exchange Online, Exchange hybrid and remaining on-premises Exchange services, including mail flow, transport rules, connectors, accepted domains, certificates, TLS, message routing, RBAC and service integrations.
Engineer and support Microsoft Defender for Office 365 and third-party email security services, including anti-phishing, anti-spam, anti-malware, Safe Links, Safe Attachments, quarantine and threat investigation.
Design, test and implement roadmap changes such as Exchange Server Subscription Edition lifecycle work, mailbox and public-folder migrations, cloud mail-flow modernization, legacy platform decommissioning and retirement of technical debt.
Provide advanced engineering support for production issues involving mail flow, message tracing, delivery failures, permissions, authentication, certificates, encryption, service health and Microsoft 365 interoperability.
Support secure onboarding of applications and platforms to Exchange services, including SMTP relay, connectors, service principals, APIs and approved automation accounts.
Support email encryption and data-protection capabilities, including Microsoft Purview Message Encryption, RMS behaviour, external recipient experience and integration with third-party email security and DLP platforms.
Provide advanced support during major incidents, lead technical troubleshooting, engage Microsoft and other vendors, identify root cause and document corrective and preventive actions.
Develop and maintain PowerShell and Microsoft Graph automation for repeatable engineering, administration, reporting, validation, monitoring and support activities.
Design and maintain least-privilege administrative access using Microsoft 365 RBAC and enterprise identity-governance processes.
Create and maintain solution designs, technical standards, implementation plans, test plans, operational procedures, recovery procedures, support documentation and user guidance.
Prepare for and participate in audit activities, provide technical evidence and remediate control or documentation gaps.
Monitor Microsoft product changes and roadmap announcements, assess service impact and convert relevant changes into planned engineering or operational work.
Identify opportunities to reduce technical debt, simplify the service estate and improve operational processes through standardisation and automation.
Provide knowledge transfer and technical guidance to engineering and operations teams, and support controlled handover of new capabilities into production.

Benefits

retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards
eligibility for certain tax advantaged savings plans
inclusive development opportunities
flexible work-life support
paid volunteer days
vibrant employee networks