Systems Admin – Accounts / Exchange

ASM Research•Oak Ridge, TN

10d

About The Position

The Microsoft 365 / Exchange Administrator will provide Tier III IT operations support across the Office of Information Management (OIM) and SC mission systems, with a focus on Microsoft 365 account management, Exchange Online, and identity services. This role is responsible for operating and maintaining Exchange Online, Azure Active Directory, and related M365 workloads, ensuring secure, reliable, and compliant messaging and collaboration services in alignment with DOE directives. The ideal candidate will have strong expertise in mail systems, identity management, and M365 administration, while supporting hybrid environments and evolving enterprise service delivery models.

Requirements

Bachelor’s Degree in Information Technology, Computer Science or a related field or equivalent relevant experience; Master’s Degree preferred.
Demonstrated technical proficiency equivalent to industry-recognized certifications, such as: Microsoft 365 Certified: Messaging Administrator Associate, Microsoft 365 Certified: Enterprise Administrator Expert, Microsoft Certified: Azure Administrator Associate, CompTIA Security+ or Network+.
7-10 years of experience in information technology, systems administration or other IT related field.
Proficiency in PowerShell scripting, Azure CLI, and automation tools for M365 and Exchange administration.
Strong knowledge of Exchange Online, Azure AD, Teams, SharePoint Online, and OneDrive.
Ability to support Windows, macOS, and mobile endpoints integrated with M365 services.
Experience with hybrid Exchange environments (on-premises + cloud).
Familiarity with M365 compliance frameworks (DLP, retention, eDiscovery, audit).
Strong troubleshooting skills for mail flow, account provisioning, and identity synchronization issues.

Responsibilities

Administer Azure Active Directory (Azure AD), including user lifecycle management, group policies, conditional access, MFA, and role-based access control.
Manage M365 accounts and licensing, ensuring proper provisioning, de-provisioning, and compliance with organizational policies.
Implement and enforce identity protection and security policies across M365 tenants.
Provide Tier III support for Windows, macOS, and mobile endpoints integrated with M365 services.
Administer Exchange Online mail flow, including transport rules, connectors, mailbox policies, and hybrid configurations.
Manage mailbox provisioning, permissions, and retention policies.
Support public folders, shared mailboxes, and distribution groups.
Monitor and troubleshoot mail delivery, synchronization, and performance issues.
Implement and maintain security and compliance features such as DLP, eDiscovery, audit logging, and retention.
Support Microsoft Teams policies, messaging, and voice integration.
Administer SharePoint Online and OneDrive for Business, including permissions, governance, and data protection.
Ensure integration and interoperability across Exchange, Teams, SharePoint, and OneDrive.
Continuously monitor Exchange Online and M365 services for availability, health, and performance.
Detect and resolve service bottlenecks, outages, and synchronization issues in line with SLAs.
Track and report on license utilization, resource consumption, and Azure/M365 cost usage.
Maintain operational records such as maintenance logs, backup validation history, and tenant inventories.
Maintain and update the Configuration Management Database (CMDB) with M365 and Exchange configuration items.
Submit all changes via the OIM-approved change management system in accordance with the Change Control Review (CCR) process.
Evaluate proposed changes for technical and cybersecurity risk, ensuring compliance with secure baselines.
Document and maintain tenant policies, SOPs, and configuration records, reviewed quarterly or after major changes.