Software engineer - Infrastructure

Job Title: Software engineer - Infrastructure

Job Type: Full-Time

Experience: 7-10 Years

Position Overview

We are seeking a highly experienced Infrastructure Engineer with deep expertise across Microsoft 365, Exchange, Identity, and Azure infrastructure to lead, operate, and continuously evolve our enterprise collaboration, messaging, and cloud platforms. This role is responsible for the end-to-end reliability, security, and scalability of Microsoft 365, Exchange, Active Directory, Entra ID, and Azure services supporting corporate offices, branch locations, and field teams.

Skill Summary

Core Infrastructure: Microsoft Exchange (On-Prem, Online, Hybrid), Microsoft 365, Active Directory / Entra ID, Windows Server, Linux, Hyper-V

Cloud & Azure: Azure Virtual Machines, Storage Accounts, Virtual Networks, Azure Resource Manager, Azure CLI, Azure RBAC, Azure Policy, Azure Monitor, Azure Bastion, Azure Traffic Manager

Messaging & Security: Intune, Microsoft Defender for Office 365, eDiscovery, AIP, DLP, mail hygiene solutions

Backup & DR: Egnyte Backup, Rubrik Backup, Azure Backup, snapshots and restore testing

Automation & DevOps: PowerShell, Azure CLI, Terraform, YAML, CI/CD, KQL

Collaboration: Teams, Stream, Planner, Power Platform, Power Automate

Networking: VPNs, Load Balancers, Failover Clusters, DNS (Infoblox), Print Servers

Key Responsibilities

Lead day-to-day operations of Microsoft Exchange and Microsoft 365 across on-premises, hybrid, and cloud environments, ensuring high availability, performance, security, and SLA adherence for enterprise messaging and collaboration services.

Plan and execute Exchange and identity migrations for mergers, acquisitions, and divestitures, including tenant-to-tenant migrations, mailbox and domain coexistence, identity consolidation, and cutover strategies with minimal business disruption.

Administer and continuously optimize the Microsoft 365 tenant, including licensing, security and compliance policies, Microsoft Defender for Office 365 (EOP/MDO), Intune, and service integrations across collaboration workloads.

Manage and secure enterprise identity platforms, including On-Premises Active Directory and Entra ID, covering OU design, Group Policy, delegated administration, RBAC, authentication models, and hybrid identity (AAD Connect / Cloud Sync).

Design, deploy, upgrade, and operate Exchange environments, including version upgrades and migrations to Exchange Online, ensuring resiliency, compliance, and operational excellence.

Own Windows Server administration across on-premises and Azure-hosted environments, including patching, hardening, performance tuning, backup/restore, monitoring, capacity planning, and compliance with enterprise standards.

Lead Azure infrastructure operations, managing Virtual Machines, Storage Accounts, Virtual Networks, and platform services to ensure availability, scalability, security, and cost efficiency.

Drive on-premises to Azure migration initiatives, ensuring secure data transfer, workload modernization, governance alignment, and minimal impact to business operations.

Architect, deploy, and operate container platforms using Azure App Services and cloud-native workloads & Azure Kubernetes Service (AKS) to ensure high availability, performance, and secure application hosting.

Implement and maintain robust email security and compliance controls, including protection against phishing, malware, spoofing, and spam, as well as retention, legal hold, eDiscovery, AIP, and DLP.

Troubleshoot and resolve complex Exchange, identity, and Windows infrastructure incidents (L2/L3), lead root-cause analysis, and implement long-term preventive and reliability improvements.

Develop and maintain backup, disaster recovery, and business continuity strategies for messaging, identity, and Windows-based infrastructure services.

Drive automation and standardization using PowerShell and related tool chains to improve provisioning, configuration management, reporting, and operational efficiency.

Produce and maintain high-quality documentation, including runbooks, operational procedures, architecture diagrams, and change records in alignment with change management practices.

Collaborate with cross-functional teams, including Service Desk, SCCM/Platform teams, Security, and Account Management, to ensure seamless operations, secure deployments, and effective support handoffs.

Participate in agile delivery and operational governance, including stand-ups, retrospectives, backlog refinement, and regular status reporting.

Provide secondary support for DNS and Print Server services, ensuring reliable name resolution and printing for corporate offices and on-site teams.

Participate in on-call rotations and scheduled maintenance windows, supporting critical incidents, infrastructure upgrades, and strategic technology initiatives.

Required Qualifications

• Bachelors degree in IT, Computer Science, or related field; or equivalent work experience.
• 710 years of hands-on IT engineering with deep Exchange experience (2013/2016/2019 and Exchange Online).
• 7+ years supporting Exchange Online and Microsoft 365 in enterprise environments.
• 5+ years in similar roles covering AD design, Azure/Entra and O365 break/fix, engineering, complex implementations, and migrations.
• Expertise in Exchange administration, hybrid configurations, mail flow/SMTP relay, and transport/security policies.
• Hands-on experience with complex AD infrastructures; strict adherence to standards, procedures, and processes.
• Proficiency with email migration tools and methodologies; experience with backup and recovery for messaging systems.
• Strong experience with O365 Security & Compliance: Litigation Hold, eDiscovery, AIP, and DLP deployment.
• Operational knowledge of hygiene solutions: EOP/Defender for Office 365 (ATP), IronPort, FireEye ETP-C, Proofpoint.
• PowerShell scripting and command-line proficiency across Exchange, M365, AD/Entra, and Windows Server.
• Excellent troubleshooting, analytical, communication, and documentation skills; effective collaborator and team member.

Preferred Qualifications

• Experience with Intune device/app management, Conditional Access, and configuration baselines.
• Experience with SCCM/ConfigMgr-based deployments and client management.
• Hands-on DNS administration (zones, records, split-brain, security) and Print Server management (queues, drivers, GPO deployment).
• Familiarity with ITIL practices, change/incident/problem management workflows.
• Relevant certifications: Microsoft 365 Certified (Administrator Expert, MS-102), Microsoft Certified: Identity and Access Administrator (SC-300), Exchange-focused certifications, CompTIA Security+, AZ-104 or equivalent.

Working Conditions

• Hybrid or on-site with periodic travel to branch offices and data centers as needed.
• Participation in on-call rotation and occasional after-hours maintenance.