Microsoft Infrastructure Architect – Exchange & Identity
Role Overview
We are seeking an experienced Microsoft Infrastructure Architect – Exchange & Identity to design, implement, and optimize enterprise messaging, directory services, and hybrid identity solutions across on-premises and cloud environments.
The ideal candidate must possess strong hands‑on technical expertise and architectural experience in on-premises Microsoft Exchange Server, Active Directory (AD), Microsoft Entra ID Connect Sync, and Exchange Hybrid Configuration. This role requires the ability to lead complex infrastructure implementations, troubleshoot advanced technical issues, and develop secure, scalable, and resilient hybrid infrastructure solutions.
Responsibilities
Key Responsibilities
1. On-Premises Microsoft Exchange Server – Critical Requirement
- Design, implement, administer, and optimize on-premises Microsoft Exchange Server environments.
- Lead Exchange Server upgrades, infrastructure modernization, migrations, and integration with Exchange Online.
- Design and manage mailbox databases, mail flow, transport rules, connectors, and email routing.
- Troubleshoot complex Exchange issues involving mailbox access, message delivery, connectivity, and server performance.
- Develop high‑availability, disaster recovery, and business continuity strategies for enterprise messaging environments.
- Plan and execute mailbox migrations from on-premises Exchange to Exchange Online while maintaining service continuity.
2. Active Directory (AD DS) – Critical Requirement
- Design, implement, and maintain enterprise Active Directory Domain Services architecture.
- Manage AD domains, forests, organizational units (OUs), Group Policy, DNS integration, and directory replication.
- Develop identity management and access control strategies across on-premises and cloud environments.
- Troubleshoot complex authentication, replication, account synchronization, and directory service issues.
- Lead Active Directory upgrades, migrations, consolidation, and integration with Microsoft Entra ID.
- Establish security standards for privileged accounts, user access, and directory services.
3. Microsoft Entra ID Connect Sync – Critical Requirement
- Design, implement, configure, and maintain Microsoft Entra ID Connect Sync to synchronize identities between on-premises Active Directory and Microsoft Entra ID.
- Configure synchronization rules, attribute flows, filtering, source anchor settings, and identity matching where applicable.
- Troubleshoot synchronization failures, duplicate identities, attribute conflicts, and authentication‑related issues.
- Design and maintain reliable hybrid identity synchronization processes.
- Evaluate synchronization architecture, operational resilience, and recovery procedures.
- Ensure consistent identity data across on-premises AD and Microsoft 365 services.
4. Exchange Hybrid Configuration – Critical Requirement
- Architect, implement, and manage Exchange Hybrid environments connecting on-premises Exchange Server with Exchange Online.
- Configure and troubleshoot Exchange Hybrid Configuration Wizard deployments and hybrid connectivity.
- Design secure mail flow, connectors, Autodiscover, free/busy calendar sharing, and mailbox coexistence.
- Lead hybrid mailbox migration planning, execution, and post‑migration validation.
- Resolve complex hybrid issues involving authentication, mail routing, migration endpoints, and connectivity.
- Assess existing hybrid environments and recommend improvements to security, reliability, performance, and operational efficiency.
5. Enterprise Architecture & Technical Leadership
- Develop solution architecture documents, technical designs, infrastructure roadmaps, and implementation plans.
- Establish architecture standards, technical governance, security controls, and operational best practices.
- Lead technical assessments, infrastructure gap analyses, and risk mitigation initiatives.
- Collaborate with cloud, network, cybersecurity, infrastructure, and application teams.
- Provide technical direction and mentorship to engineers and infrastructure support teams.
- Present architecture recommendations and technical solutions to business stakeholders and senior management.
6. Project Delivery & Infrastructure Optimization
- Lead end‑to‑end infrastructure implementation, migration, and modernization projects.
- Translate business and technical requirements into secure, scalable, and maintainable architecture solutions.
- Manage technical dependencies, implementation risks, and service transition activities.
- Conduct root cause analysis for complex infrastructure incidents and recommend long‑term corrective actions.
- Ensure architecture documentation, operational procedures, and knowledge transfer are completed.
Qualifications
- Bachelor's degree in Information Technology, Computer Science, Computer Engineering, or a related discipline, or equivalent professional experience.
- 8–10+ years of experience in Microsoft infrastructure, messaging, identity management, or enterprise systems engineering.
- 3–5+ years of experience in infrastructure architecture, solution design, or technical leadership.
- Proven hands‑on experience administering and designing on‑premises Microsoft Exchange Server environments.
- Strong expertise in Active Directory Domain Services architecture and administration.
- Demonstrated implementation and troubleshooting experience with Microsoft Entra ID Connect Sync.
- Proven experience designing, implementing, and supporting Exchange Hybrid environments.
- Experience leading enterprise messaging migrations, hybrid identity implementations, and infrastructure modernization projects.
- Strong PowerShell scripting, technical documentation, troubleshooting, and stakeholder management skills.
Required Skills
- Technical Skills – Priority Screening Areas
- Candidates must demonstrate practical, hands‑on experience in the following four areas:
- On‑Premises Exchange Server: Exchange administration, mail flow, mailbox management, troubleshooting, upgrades, and migrations.
- Active Directory (AD DS): Domain and forest architecture, Group Policy, DNS, replication, authentication, and directory management.
- Microsoft Entra ID Connect Sync: Identity synchronization configuration, attribute mapping, synchronization troubleshooting, and hybrid identity management.