Exchange & Security Administrator, AVP

State Street•Princeton, NJ

About The Position

State Street is seeking an M365 Exchange & Security Engineer to join its Collaboration Services team in Boston. The role supports delivery of the Collaboration Services roadmap by modernizing mail flow and threat-protection capabilities, strengthening operational resilience, and supporting business and technical users. Working with the tower lead, architects, engineers, operations teams, and control partners, the engineer gathers requirements and delivers solution engineering, implementation, documentation, and advanced support across Exchange and email security. The position engineers and supports Exchange Online, hybrid Exchange, and remaining on-premises Exchange services, as well as Microsoft Defender for Office 365 and third-party email security services. It implements roadmap changes, supports production operations and major incidents, develops automation, maintains least-privilege access, prepares technical documentation and audit evidence, monitors Microsoft product changes, reduces technical debt, and transfers knowledge to engineering and operations teams.

Requirements

Deep hands-on engineering and support experience with Exchange Online and Exchange hybrid or on-premises environments, including transport, connectors, mail routing, certificates, TLS, RBAC, mailbox management, and troubleshooting.
Strong experience with Microsoft Defender for Office 365 and enterprise email security controls, including threat policies, investigation, quarantine, and mail-flow protection.
Experience designing and supporting integrations between Exchange, Microsoft Purview, Microsoft Defender for Office 365, and third-party email security, DLP, archive, or encryption platforms.
Strong PowerShell skills for Exchange Online and Microsoft 365 engineering and administration.
Practical knowledge of Microsoft Entra ID, authentication, Conditional Access, enterprise applications, service principals, privileged access, and least-privilege design.
Working knowledge of Microsoft Purview capabilities relevant to email, including Message Encryption, sensitivity labels, DLP, retention, eDiscovery, and Audit.
Experience with Microsoft 365 security and compliance controls in a large, regulated enterprise, including audit evidence, control testing, change management, and risk remediation.
Ability to troubleshoot complex end-to-end issues across cloud services, hybrid infrastructure, identity, networking, DNS, certificates, and third-party integrations.
Experience with service monitoring, incident management, problem management, change implementation, testing, and operational readiness.
Ability to work independently, lead technical workstreams, and collaborate effectively with engineers, operations teams, control partners, and vendors.
Detailed and organized critical thinker with strong problem-solving skills and a focus on service resilience, security, and supportability.
Effective verbal and written communication skills, including the ability to explain technical risks, options, and recommendations clearly.
A degree in Computer Science or a related discipline, or at least 5 years of equivalent work experience.

Nice To Haves

Experience with Microsoft Graph, APIs, Power Automate, or Python.
Experience with Exchange Online, Microsoft Defender, and Microsoft Purview.

Responsibilities

Engineer, configure, and support Exchange Online, hybrid Exchange, and remaining on-premises Exchange services, including mail flow, transport rules, connectors, accepted domains, certificates, TLS, message routing, RBAC, and service integrations.
Engineer and support Microsoft Defender for Office 365 and third-party email security services, including anti-phishing, anti-spam, anti-malware, Safe Links, Safe Attachments, quarantine, and threat investigation.
Design, test, and implement roadmap changes, including Exchange Server Subscription Edition lifecycle work, mailbox and public-folder migrations, cloud mail-flow modernization, legacy platform decommissioning, and technical-debt retirement.
Provide advanced engineering support for production issues involving mail flow, message tracing, delivery failures, permissions, authentication, certificates, encryption, service health, and Microsoft 365 interoperability.
Support secure onboarding of applications and platforms to Exchange services, including SMTP relay, connectors, service principals, APIs, and approved automation accounts.
Support email encryption and data-protection capabilities, including Microsoft Purview Message Encryption, RMS behavior, external-recipient experience, and integration with third-party email security and DLP platforms.
Provide advanced support during major incidents, lead technical troubleshooting, engage Microsoft and other vendors, identify root causes, and document corrective and preventive actions.
Develop and maintain PowerShell and Microsoft Graph automation for engineering, administration, reporting, validation, monitoring, and support activities.
Design and maintain least-privilege administrative access using Microsoft 365 RBAC and enterprise identity-governance processes.
Create and maintain solution designs, technical standards, implementation plans, test plans, operational and recovery procedures, support documentation, and user guidance.
Prepare for and participate in audits, provide technical evidence, and remediate control or documentation gaps.
Monitor Microsoft product changes and roadmap announcements, assess service impacts, and translate relevant changes into planned engineering or operational work.
Identify opportunities to reduce technical debt, simplify the service estate, and improve operations through standardization and automation.
Provide knowledge transfer and technical guidance to engineering and operations teams, and support controlled handover of new capabilities into production.

Benefits

401(k) retirement savings plan with company match
Basic life insurance
Medical insurance
Dental insurance
Vision insurance
Long-term disability coverage
Other optional insurance coverages
Paid time off, including vacation and sick leave
Short-term disability
Family-care support
Employee Assistance Program
Eligibility for annual performance-based incentive awards, with stated exclusions for certain sales roles
Eligibility for certain tax-advantaged savings plans
Inclusive development opportunities
Flexible work-life support
Paid volunteer days
Employee networks