Lead System Engineer-Microsoft Exchange Expert

SGS Société Générale de Surveillance SA; Bengaluru; Hybrid; INR 2,800,000 - 3,600,000; Full time

Job summary

SGS Société Générale de Surveillance SA in Bengaluru is seeking a Lead System Engineer specialized in Microsoft Exchange and email security to architect and oversee Cisco IronPort ESA deployments across hybrid environments.

You will lead incident response for critical email security events, design DR strategies, migrate and upgrade ESA appliances, and automate operations with scripting and APIs while coordinating with Networking and Security teams.

Qualifications

• 8+ years in enterprise email security and messaging.
• 5+ years focused on Cisco IronPort ESA in large environments.
• Strong knowledge of SMTP, DNS, TCP/IP and secure mail routing.
• Hands-on experience with UNIX/Linux administration and scripting.
• Experience integrating ESA with Microsoft Exchange (2016/2019) and O365.?

Responsibilities

• Architect and manage Cisco IronPort ESA deployments with high availability and DR.
• Lead Tier-3/4 troubleshooting for email security incidents with protocol analysis.
• Design and enforce security policies for spam, malware protection, DLP, encryption.
• Plan migrations and capacity expansions for ESA appliances in large-scale environments.
• Automate tasks using CLI, Python/Bash, and APIs; collaborate with cross-functional teams.
• Document architecture, configurations, and operational playbooks.

Skills

Email security

ESA expertise

SMTP

DNS

TLS

UNIX/Linux

Scripting

Network security

Tools

Cisco ESA

SMA

Microsoft Exchange

Microsoft 365

Job description

# Lead System Engineer-Microsoft Exchange ExpertIT (Information Technology)Apply---Permanent contractBangalore, IndiaHybrid---Reference 2600061SStart date ImmediatelyPublication date 2026/09/18## Responsibilities**Key Responsibilities*** **Architect and manage** complex Cisco IronPort ESA deployments (physical & virtual), including **high availability**, clustering, and disaster recovery strategies.* **Lead Tier-3/L4 troubleshooting** for critical email security incidents, performing **protocol-level analysis** (SMTP, DNS, TLS) and root cause investigations.* **Design and enforce security policies** for spam filtering, malware protection (AMP), DLP, encryption, and outbreak filters to meet compliance and regulatory requirements.* **Plan and execute migrations, upgrades, and capacity expansions** for Cisco ESA appliances in large-scale environments.* **Develop and execute test plans** for new features, configurations, and integrations with Microsoft Exchange and Microsoft 365.* **Integrate ESA with Security Management Appliance (SMA)** for centralized reporting, quarantine management, and policy orchestration.* **Automate operational tasks** using CLI, scripting (Python/Bash), and APIs to improve efficiency and reduce manual overhead.* **Collaborate with cross-functional teams** (Messaging, Network, Security) to ensure seamless mail flow and secure integration with firewalls, DNS (SPF/DKIM and DMARC), and Active Directory.* Maintain **comprehensive documentation** for architecture, configurations, troubleshooting guides, and operational playbooks.* Provide **technical leadership and mentorship** to junior engineers and support teams.**Required Skills & Expertise*** **8+ years** of experience in enterprise email security and messaging platforms, with **5+ years dedicated to Cisco IronPort ESA** in large, complex environments.* Strong knowledge of **SMTP, DNS, FTP, SSH, TCP/IP**, and secure mail routing principles.* Expertise in **Cisco ESA features**: AMP, DLP, encryption, content filtering, reputation-based controls, and outbreak filters.* Hands-on experience with **policy design**, **disaster recovery planning**, and **risk analysis** for email security.* Proficiency in **UNIX/Linux administration**, scripting (PowerShell, Python, Bash), and automation frameworks.* Solid networking knowledge, including **firewalls, NAT, subnetting**, and load balancing.* Experience integrating ESA with **Microsoft Exchange (2016/2019)** and **Microsoft O365** environments.* Familiarity with **Active Directory/LDAP** for directory integration and authentication.* Strong written and verbal communication skills for documentation and stakeholder engagement.## Profile required**Key Responsibilities*** **Architect and manage** complex Cisco IronPort ESA deployments (physical & virtual), including **high availability**, clustering, and disaster recovery strategies.* **Lead Tier-3/L4 troubleshooting** for critical email security incidents, performing **protocol-level analysis** (SMTP, DNS, TLS) and root cause investigations.* **Design and enforce security policies** for spam filtering, malware protection (AMP), DLP, encryption, and outbreak filters to meet compliance and regulatory requirements.* **Plan and execute migrations, upgrades, and capacity expansions** for Cisco ESA appliances in large-scale environments.* **Develop and execute test plans** for new features, configurations, and integrations with Microsoft Exchange and Microsoft 365.* **Integrate ESA with Security Management Appliance (SMA)** for centralized reporting, quarantine management, and policy orchestration.* **Automate operational tasks** using CLI, scripting (Python/Bash), and APIs to improve efficiency and reduce manual overhead.* **Collaborate with cross-functional teams** (Messaging, Network, Security) to ensure seamless mail flow and secure integration with firewalls, DNS (SPF/DKIM and DMARC), and Active Directory.* Maintain **comprehensive documentation** for architecture, configurations, troubleshooting guides, and operational playbooks.* Provide **technical leadership and mentorship** to junior engineers and support teams.**Required Skills & Expertise*** **8+ years** of experience in enterprise email security and messaging platforms, with **5+ years dedicated to Cisco IronPort ESA** in large, complex environments.* Strong knowledge of **SMTP, DNS, FTP, SSH, TCP/IP**, and secure mail routing principles.* Expertise in **Cisco ESA features**: AMP, DLP, encryption, content filtering, reputation-based controls, and outbreak filters.* Hands-on experience with **policy design**, **disaster recovery planning**, and **risk analysis** for email security.* Proficiency in **UNIX/Linux administration**, scripting (PowerShell, Python, Bash), and automation frameworks.* Solid networking knowledge, including **firewalls, NAT, subnetting**, and load balancing.* Experience integrating ESA with **Microsoft Exchange (2016/2019)** and **Microsoft O365** environments.* Familiarity with **Active Directory/LDAP** for directory integration and authentication.* Strong written and verbal communication skills for documentation and stakeholder engagement.## Why join us“We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status”.## Business insightAt Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious. Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating, and taking action are part of our DNA. If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!Still hesitating? You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.We are an **equal opportunities employer** and we are proud to make diversity a strength for our company. Societe Generale is committed to recognizing and **promoting all talents**, regardless of their beliefs, age, disability, parental status, ethnic origin, nationality, gender identity, sexual orientation, membership of a political, religious, trade union or minority organisation, or any other characteristic that could be subject to discrimination.