Lead System Engineer-Microsoft Exchange Expert

Societe Generale Global Solution Centre; Bengaluru; On-site; INR 4,200,000 - 6,600,000; Full time

Job summary

Societe Generale Global Solution Centre in Bengaluru is seeking an senior Architect to lead Cisco IronPort ESA deployments, security policy design, and large-scale migrations. You will supervise Tier-3/4 incident response, ensure HA, DR, and compliance, and mentor junior engineers.

Experience with Microsoft Exchange/O365, SMA integration, and scripting is essential. Join a global security-focused team delivering robust email protection, advanced threat handling, and automated operations to

Qualifications

• 8+ years of experience in enterprise email security and messaging platforms, with 5+ years dedicated to Cisco IronPort ESA in large, complex environments.
• Strong knowledge of SMTP, DNS, FTP, SSH, TCP/IP, and secure mail routing principles.
• Hands-on experience with UNIX/Linux administration, scripting (PowerShell, Python, Bash), and automation frameworks.

Responsibilities

• Architect and manage complex Cisco IronPort ESA deployments (physical & virtual), including high availability, clustering, and disaster recovery strategies.
• Lead Tier-3/L4 troubleshooting for critical email security incidents, performing protocol-level analysis (SMTP, DNS, TLS) and root cause investigations.
• Design and enforce security policies for spam filtering, malware protection (AMP), DLP, encryption, and outbreak filters to meet compliance and regulatory requirements.
• Plan and execute migrations, upgrades, and capacity expansions for Cisco ESA appliances in large-scale environments.
• Develop and execute test plans for new features, configurations, and integrations with Microsoft Exchange and Microsoft 365.
• Integrate ESA with Security Management Appliance (SMA) for centralized reporting, quarantine management, and policy orchestration.
• Automate operational tasks using CLI, scripting (Python/Bash), and APIs to improve efficiency and reduce manual overhead.
• Collaborate with cross-functional teams (Messaging, Network, Security) to ensure seamless mail flow and secure integration with firewalls, DNS (SPF/DKIM and DMARC), and Active Directory.
• Maintain comprehensive documentation for architecture, configurations, troubleshooting guides, and operational playbooks.
• Provide technical leadership and mentorship to junior engineers and support teams.

Skills

Cisco ESA

SMTP/DNS/TLS

UNIX/Linux

PowerShell

Python

Bash

Microsoft Exchange/O365

Active Directory/LDAP

Firewall integration

High availability

Documentation

Policy design

Networking fundamentals

Job description

• Architect and manage complex Cisco IronPort ESA deployments (physical & virtual), including high availability, clustering, and disaster recovery strategies.
• Lead Tier-3/L4 troubleshooting for critical email security incidents, performing protocol-level analysis (SMTP, DNS, TLS) and root cause investigations.
• Design and enforce security policies for spam filtering, malware protection (AMP), DLP, encryption, and outbreak filters to meet compliance and regulatory requirements.
• Plan and execute migrations, upgrades, and capacity expansions for Cisco ESA appliances in large-scale environments.
• Develop and execute test plans for new features, configurations, and integrations with Microsoft Exchange and Microsoft 365.
• Integrate ESA with Security Management Appliance (SMA) for centralized reporting, quarantine management, and policy orchestration.
• Automate operational tasks using CLI, scripting (Python/Bash), and APIs to improve efficiency and reduce manual overhead.
• Collaborate with cross-functional teams (Messaging, Network, Security) to ensure seamless mail flow and secure integration with firewalls, DNS (SPF/DKIM and DMARC), and Active Directory.
• Maintain comprehensive documentation for architecture, configurations, troubleshooting guides, and operational playbooks.
• Provide technical leadership and mentorship to junior engineers and support teams.

Reference 2600061S

Responsibilities

• Architect and manage complex Cisco IronPort ESA deployments (physical & virtual), including high availability, clustering, and disaster recovery strategies.
• Lead Tier-3/L4 troubleshooting for critical email security incidents, performing protocol-level analysis (SMTP, DNS, TLS) and root cause investigations.
• Design and enforce security policies for spam filtering, malware protection (AMP), DLP, encryption, and outbreak filters to meet compliance and regulatory requirements.
• Plan and execute migrations, upgrades, and capacity expansions for Cisco ESA appliances in large-scale environments.
• Develop and execute test plans for new features, configurations, and integrations with Microsoft Exchange and Microsoft 365.
• Integrate ESA with Security Management Appliance (SMA) for centralized reporting, quarantine management, and policy orchestration.
• Automate operational tasks using CLI, scripting (Python/Bash), and APIs to improve efficiency and reduce manual overhead.
• Collaborate with cross-functional teams (Messaging, Network, Security) to ensure seamless mail flow and secure integration with firewalls, DNS (SPF/DKIM and DMARC), and Active Directory.
• Maintain comprehensive documentation for architecture, configurations, troubleshooting guides, and operational playbooks.
• Provide technical leadership and mentorship to junior engineers and support teams.

Key Responsibilities

• Architect and manage complex Cisco IronPort ESA deployments (physical & virtual), including high availability, clustering, and disaster recovery strategies.
• Lead Tier-3/L4 troubleshooting for critical email security incidents, performing protocol-level analysis (SMTP, DNS, TLS) and root cause investigations.
• Design and enforce security policies for spam filtering, malware protection (AMP), DLP, encryption, and outbreak filters to meet compliance and regulatory requirements.
• Plan and execute migrations, upgrades, and capacity expansions for Cisco ESA appliances in large-scale environments.
• Develop and execute test plans for new features, configurations, and integrations with Microsoft Exchange and Microsoft 365.
• Integrate ESA with Security Management Appliance (SMA) for centralized reporting, quarantine management, and policy orchestration.
• Automate operational tasks using CLI, scripting (Python/Bash), and APIs to improve efficiency and reduce manual overhead.
• Collaborate with cross-functional teams (Messaging, Network, Security) to ensure seamless mail flow and secure integration with firewalls, DNS (SPF/DKIM and DMARC), and Active Directory.
• Maintain comprehensive documentation for architecture, configurations, troubleshooting guides, and operational playbooks.
• Provide technical leadership and mentorship to junior engineers and support teams.

Required Skills & Expertise

• 8+ years of experience in enterprise email security and messaging platforms, with 5+ years dedicated to Cisco IronPort ESA in large, complex environments.
• Strong knowledge of SMTP, DNS, FTP, SSH, TCP/IP, and secure mail routing principles.
• Expertise in Cisco ESA features: AMP, DLP, encryption, content filtering, reputation-based controls, and outbreak filters.
• Hands‑on experience with policy design, disaster recovery planning, and risk analysis for email security.
• Proficiency in UNIX/Linux administration, scripting (PowerShell, Python, Bash), and automation frameworks.
• Solid networking knowledge, including firewalls, NAT, subnetting, and load balancing.
• Experience integrating ESA with Microsoft Exchange (2016/2019) and Microsoft O365 environments.
• Familiarity with Active Directory/LDAP for directory integration and authentication.
• Strong written and verbal communication skills for documentation and stakeholder engagement.

Required

Profile required

Required Skills & Expertise

• 8+ years of experience in enterprise email security and messaging platforms, with 5+ years dedicated to Cisco IronPort ESA in large, complex environments.
• Strong knowledge of SMTP, DNS, FTP, SSH, TCP/IP, and secure mail routing principles.
• Expertise in Cisco ESA features: AMP, DLP, encryption, content filtering, reputation‑based controls, and outbreak filters.
• Hands‑on experience with policy design, disaster recovery planning, and risk analysis for email security.
• Proficiency in UNIX/Linux administration, scripting (PowerShell, Python, Bash), and automation frameworks.
• Solid networking knowledge, including firewalls, NAT, subnetting, and load balancing.
• Experience integrating ESA with Microsoft Exchange (2016/2019) and Microsoft O365 environments.
• Familiarity with Active Directory/LDAP for directory integration and authentication.
• Strong written and verbal communication skills for documentation and stakeholder engagement.

Why join us

We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Business insight

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious. Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating, and taking action are part of our DNA. If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?

You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.