Hiring For AD & Email Support Engineer| Kolkata location

Emami; Kolkata District; Vor Ort; INR 1.200.000 - 2.400.000; Vollzeit

Zusammenfassung

Emami is seeking an AD & Email Support Engineer to manage advanced Active Directory and enterprise email platforms. You will serve as a SME for identity, authentication, and messaging services, ensuring high availability, security compliance, and support for business-critical operations and audits.

You will lead AD management, GPO design, mail flow optimization, and email security incidents, while working with engineers on migrations, hybrid configurations, and policy enforcement.

Qualifikationen

• Bachelor's degree in Computer Science, IT, Engineering or equivalent practical experience.
• Mandatory Microsoft Certifications: MS-700, MS-721, MS-102.
• Preferred: Windows Server Identity, ITIL Foundation, ISO 27001/ISMS awareness.

Aufgaben

• Administer AD DS, Forests, Domains, Trusts, FSMO roles.
• Design/optimize OU structures, GPOs, access controls.
• Resolve AD replication issues and health checks.
• Manage privileged access, RBAC, and domain controller hardening.
• Administer Exchange On-Prem/Hybrid and Microsoft 365.
• Troubleshoot mail flow, MX/SPF/DKIM/DMARC, mailboxes and retention policies.

Kenntnisse

AD DS management

Group Policy

DNS/DHCP

Kerberos/NTLM/LDAP

Email security

PowerShell scripting

Exchange/M365 admin

MFA/CA

RBAC

Ausbildung

Bachelor's in CS/IT/Engineering

MS-700 (Teams)

MS-721 (Collab)

MS-102 (365)

ISO27001/ISMS

Tools

Hyper-V

DNS

DHCP

Trend Micro Email Security

ServiceNow

Jobbeschreibung

Role & responsibilities

The AD & Email Support Engineer will be responsible for advanced administration, troubleshooting, optimization, and security of Active Directory and enterprise email platforms. This role acts as a Subject Matter Expert (SME) for identity, authentication, and messaging services, ensuring high availability, security compliance, and support for business-critical operations and audits.

Core Responsibilities

1. Advanced Active Directory (AD) Management

• Deep administration of Active Directory Domain Services (AD DS) including Forests, Domains, Trusts, and FSMO roles
• Design, implement, and optimize OU structures, delegation models, and access controls
• Advanced Group Policy (GPO) design, inheritance analysis, troubleshooting, and performance optimization
• Diagnose and resolve AD replication issues, including SYSVOL, DNS dependencies, and Sites & Services topology
• Troubleshoot complex authentication and authorization issues (Kerberos, NTLM, LDAP)
• Conduct AD health checks, security baselining, and remediation activities
• Manage Privileged Access, service accounts, and Role-Based Access Control (RBAC)
• Perform Domain Controller hardening, patching, upgrades, and lifecycle management

2. Enterprise Email & Messaging Expertise

• Administration of Microsoft Exchange (On-Premises / Hybrid) and Microsoft 365
• Deep troubleshooting of mail flow, connectors, and routing
• Configuration and validation of MX, SPF, DKIM, and DMARC
• Management of shared mailboxes, resource mailboxes, transport rules, and retention policies
• Handling email security incidents, including phishing, spoofing, and malware outbreaks
• Execution of mailbox migrations, hybrid configurations, and tenant-to-tenant migrations
• Configuration and troubleshooting of Outlook, Autodiscover, and mobile device access
• Ensure compliance with email retention, eDiscovery, legal hold, and audit requirements

Educational Qualifications & Certifications

• Bachelors degree in Computer Science, Information Technology, Engineering, or equivalent practical experience
• Mandatory Microsoft Certifications:
  • MS-700 (Managing Microsoft Teams)
  • MS-721 (Collaboration Communications Systems Engineer)
  • MS-102 (Microsoft 365 Administrator)
• Preferred certifications:
  • Microsoft Certified: Windows Server / Identity
  • Microsoft 365 / Exchange certifications
  • ITIL Foundation
  • ISO 27001 / ISMS awareness
• Hands‑on experience with Email Gateway Security, including:
  • Trend Micro Advanced Security
  • Trend Micro Vision One
  • Trend Micro Cloud & Email Collaboration Protection
• Supporting infrastructure knowledge: Hyper‑V, DNS, DHCP

Core Technical Skills (Mandatory)

Active Directory & Identity

• Expert-level knowledge of Active Directory Domain Services (AD DS)
• Strong understanding of Forest, Domain, Trust relationships, and FSMO roles
• Advanced expertise in Group Policy design, filtering, inheritance, and troubleshooting
• In-depth knowledge of DNS integration, AD replication, SYSVOL, and Sites & Services
• Hands‑on troubleshooting of Kerberos, NTLM, and LDAP authentication issues
• Experience with Privileged Access Management, service accounts, RBAC, and least‑privilege models

Email & Messaging Systems

• Advanced administration of Microsoft Exchange (On-Prem / Hybrid) and Microsoft 365
• Strong understanding of mail flow architecture, connectors, and transport rules
• Expertise in SPF, DKIM, DMARC, MX records, and email security controls
• Hands‑on experience with mailbox migrations, hybrid environments, and coexistence
• Advanced troubleshooting of Outlook, Autodiscover, mobile email, and delivery issues
• Proven experience handling phishing, spoofing, and malware incidents

Security & Compliance

• Practical knowledge of identity security controls, including MFA and Conditional Access
• Experience aligning AD and email configurations with ISO 27001 / ISMS controls
• Understanding of audit evidence collection, access reviews, and compliance reporting
• Familiarity with security incident response related to identity and messaging platforms

Automation & Scripting

• Intermediate to advanced PowerShell scripting for:
  • User provisioning and de‑provisioning
  • Bulk mailbox and access management
  • Reporting and compliance validation
• Ability to automate repetitive tasks to improve operational efficiency and accuracy

Supporting Technical Knowledge

• Strong fundamentals of Windows Server (2016 / 2019 / 2022 / 2025)
• Working knowledge of TCP/IP, DNS, SMTP, HTTPS
• Experience with ITSM / ticketing tools (ServiceNow, Fresh service, etc.)
• Knowledge of Cloud Email and Collaboration Protection

Understanding of backup, restore, and disaster recovery for AD and email systems

Preferred candidate profile

• Excellent troubleshooting and analytical abilities
• Ability to work independently and in cross-functional teams
• Strong documentation skills, including SOPs and technical runbooks
• Clear communication with both technical and non-technical stakeholders
• Ability to handle high‑severity incidents, on-call duties, and critical outages calmly