Exchange & Security Administrator, AVP

State Street; Princeton (NJ); On-site; USD 120,000 - 150,000; Full time

Job summary

State Street in Boston is seeking an M365 Exchange & Security Engineer to join the Collaboration Services team. You will engineer, configure and support Exchange Online, hybrid deployments, and on-premises Exchange services, focusing on mail flow, security controls and robust operational resilience.

You will work with architects and operations teams to gather requirements, implement roadmap changes, automate with PowerShell and Graph APIs, and provide incident response and advanced support

Qualifications

• Experience with Exchange Online and hybrid environments, mail routing and TLS.
• Strong PowerShell skills for automation and admin tasks.
• Experience with security controls and DLP in large enterprises.

Responsibilities

• Engineer, configure and support Exchange Online, hybrid and on-premises Exchange services, including mail flow and TLS.
• Engineer and support Defender for Office 365 and email security services.
• Design and implement roadmap changes for mailbox migrations and cloud mail-flow modernization.
• Provide advanced engineering support for production issues involving mail flow and authentication.
• Develop automation and tooling with PowerShell and Graph for repeatable engineering tasks.
• Create and maintain technical designs, standards and operational procedures.

Skills

Exchange Online

RBAC

PowerShell

Microsoft Graph

Python

Threat protection

Email security controls

Microsoft Purview

Tools

Defender for Office 365

Microsoft Purview

Microsoft Graph APIs

Power Automate

Job description

Who we are looking for

State Street is looking for an M365 Exchange & Security Engineer to become part of our Collaboration Services team in Boston.

Why this role is important to us

The role will help deliver the Collaboration Services roadmap, modernize mail flow and threat-protection capabilities, strengthen operational resilience and provide support for business and technical users of these services. Working with the tower lead, architects, engineers, operations teams and key control partners, the engineer will be responsible for requirements gathering, solution engineering, implementation, documentation and advanced support across Exchange and email security.

What you will be responsible for

• Engineer, configure and support Exchange Online, Exchange hybrid and remaining on-premises Exchange services, including mail flow, transport rules, connectors, accepted domains, certificates, TLS, message routing, RBAC and service integrations.
• Engineer and support Microsoft Defender for Office 365 and third-party email security services, including anti-phishing, anti-spam, anti-malware, Safe Links, Safe Attachments, quarantine and threat investigation.
• Design, test and implement roadmap changes such as Exchange Server Subscription Edition lifecycle work, mailbox and public-folder migrations, cloud mail-flow modernization, legacy platform decommissioning and retirement of technical debt.
• Provide advanced engineering support for production issues involving mail flow, message tracing, delivery failures, permissions, authentication, certificates, encryption, service health and Microsoft365 interoperability.
• Support secure onboarding of applications and platforms to Exchange services, including SMTP relay, connectors, service principals, APIs and approved automation accounts.
• Support email encryption and data-protection capabilities, including Microsoft Purview Message Encryption, RMS behaviour, external recipient experience and integration with third-party email security and DLP platforms.
• Provide advanced support during major incidents, lead technical troubleshooting, engage Microsoft and other vendors, identify root cause and document corrective and preventive actions.
• Develop and maintain PowerShell and Microsoft Graph automation for repeatable engineering, administration, reporting, validation, monitoring and support activities.
• Design and maintain least-privilege administrative access using Microsoft365 RBAC and enterprise identity-governance processes.
• Create and maintain solution designs, technical standards, implementation plans, test plans, operational procedures, recovery procedures, support documentation and user guidance.
• Prepare for and participate in audit activities, provide technical evidence and remediate control or documentation gaps.
• Monitor Microsoft product changes and roadmap announcements, assess service impact and convert relevant changes into planned engineering or operational work.
• Identify opportunities to reduce technical debt, simplify the service estate and improve operational processes through standardisation and automation.
• Provide knowledge transfer and technical guidance to engineering and operations teams, and support controlled handover of new capabilities into production.

What we value

These skills will help you succeed in this role

• Deep hands-on engineering and support experience with Exchange Online and Exchange hybrid or on-premises environments, including transport, connectors, mail routing, certificates, TLS, RBAC, mailbox management and troubleshooting.
• Strong experience with Microsoft Defender for Office 365 and enterprise email security controls, including threat policies, investigation, quarantine and mail-flow protection.
• Experience designing and supporting integrations between Exchange, Microsoft Purview, Microsoft Defender for Office 365 and third-party email security, DLP, archive or encryption platforms.
• Strong PowerShell skills for Exchange Online and Microsoft 365 engineering and administration; experience with Microsoft Graph, APIs, Power Automate or Python is beneficial.
• Practical knowledge of Microsoft Entra ID, authentication, Conditional Access, enterprise applications, service principals, privileged access and least-privilege design.
• Working knowledge of Microsoft Purview capabilities relevant to email, including Message Encryption, sensitivity labels, DLP, retention, eDiscovery and Audit.
• Experience with Microsoft365 security and compliance controls in a large, regulated enterprise, including audit evidence, control testing, change management and risk remediation.
• Ability to troubleshoot complex end-to-end issues across cloud services, ...
• Experience with service monitoring, incident management, problem management, change implementation, testing and operational readiness.
• Ability to work independ