Manager - Directory Services and Messaging

The Jupiter Group, Inc; Houston (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

The Jupiter Group, Inc. is seeking a hands-on Directory Services and Messaging Manager to lead a senior enablement team responsible for AD, Entra ID, Azure, Exchange hybrid, and Microsoft 365 services.

You will set priorities, develop the team, and deliver secure, reliable identity and messaging solutions. You will own hybrid identity architecture, manage security controls, and coordinate major incident responses while collaborating with Security, DevOps, and IT teams.

Qualifications

• 7+ years of progressive IT infrastructure experience in large hybrid environments.
• 5+ years leading technical staff with accountability for delivery, execution, platform ownership, and cross-functional outcomes while remaining technically active.
• Expert-level knowledge of design, implementation, and support of Active Directory/Entra ID, hybrid identity, DNS, GPO administration and authentication.
• Experience with Exchange hybrid and Exchange Online design, transport, and coexistence.
• Deep hands-on with Azure administration, Microsoft 365 services (Teams, SharePoint Online, OneDrive), Intune, Purview, and Key Vault.
• Development of PowerShell and Graph API automation for provisioning, reporting, and remediation.
• Familiarity with Proofpoint, Windows Server, and security controls like MFA and conditional access.

Responsibilities

• Lead and develop a team responsible for directory, messaging, Microsoft 365, Azure, and endpoint services.
• Manage/Own hybrid identity architecture across Active Directory and Entra ID, including identity synchronization and authentication methods.
• Manage Conditional Access, MFA, RBAC, app registrations, enterprise apps, consent governance, and Key Vault.
• Own Hybrid Exchange, mail flow, SMTP relay, and migration to Exchange Online.
• Support Teams, SharePoint Online, OneDrive, Intune, Workspace ONE, and Purview operations.
• Support Purview for retention, labels, DLP, eDiscovery, and audit.
• Govern Power Platform environments, DLP policies, and connectors.
• Partner with Security, DevOps, Business Solutions, Cloud, and IT teams on secure solutions.
• Serve as the escalation point and own the 24x7 on-call model.

Skills

Active Directory

Entra ID

Azure administration

Exchange Online

Microsoft 365

Intune

PowerShell automation

Graph API

OAuth

On-call support

Tools

Proofpoint

Key Vault

Ansible

SailPoint

CyberArk

Job description

The Directory Services and Messaging Manager will serve as a hands-on leader within the IT Infrastructure and Operations organization, leading an enablement team responsible for the design, architecture, deployment, and support of Active Directory, Entra ID, Azure, Exchange hybrid and Exchange Online, Microsoft 365, Intune, Purview, and related identity, messaging, and collaboration services. This role combines people leadership and service ownership with direct technical engagement. Leading a small, senior team, the manager will set priorities, develop the team, coordinate delivery, contribute to architecture and design decisions, develop and review automation, troubleshoot complex issues, lead major incident responses, and collaborate with engineers to deliver secure, dependable, and supportable solutions.

Key responsibilities include:

• Lead and develop a team responsible for directory, messaging, Microsoft 365, Azure, and endpoint services.
• Manage/Own hybrid identity architecture across Active Directory and Entra ID, including identity synchronization, authentication methods, directory-integrated services (DNS,Kerberos,GPOs,PKI), and operational support for Microsoft 365 and Azure access.
• Manage Conditional Access, MFA, RBAC, app registrations, enterprise apps, consent governance, and Key Vault.
• Own Hybrid Exchange, mail flow, SMTP relay, and Proofpoint. Manage migration to Exchange Online
• Support Teams, SharePoint Online, OneDrive, Intune, Workspace ONE, and Microsoft 365 operations.
• Support Purview for retention, labels, DLP, eDiscovery, legal hold, and audit.
• Govern Power Platform environments, DLP policies, and connectors.
• Partner with Security, DevOps, Business Solutions, Cloud, and IT teams on secure solutions.
• Serve as the escalation point and own the 24x7 on-call model.

Qualifications

The successful candidate will meet the following qualifications:

7+ years of progressive IT infrastructure experience in large hybrid enterprise environments, including hands-on technical ownership and leadership across identity, messaging, cloud, and endpoint platforms

5+ years leading technical staff with accountability for delivery, execution, platform ownership, and cross-functional outcomes while remaining technically active.

Expert-level knowledge and experience in the design, implementation, and support of the following:

• Active Directory and Entra ID, including hybrid identity, PKI, DNS, GPO administration, and directory-integrated authentication.
• Exchange hybrid and Exchange Online, including transport, namespace, and coexistence design.
• Identity security controls, including OAuth, SSO, MFA, conditional access, access reviews, privileged access, and hybrid identity integration patterns.

Deep hands-on experience with the following:

• Azure administration, including subscription and resource organization, Azure and Entra RBAC, app registrations, service principals, managed identities, consent governance, and Key Vault.
• Microsoft 365 services, including Teams, SharePoint Online, and OneDrive.
• Endpoint management platforms, including Intune and Workspace ONE.
• Microsoft Purview, including retention, sensitivity labels, DLP, eDiscovery, and audit.
• Mail hygiene and secure email gateway administration, including Proofpoint.
• Windows Server administration across current supported versions.

Demonstrated experience in the following:

• Hands-on design and execution of an enterprise Exchange Online migration, including hybrid transport, namespace, and coexistence.
• Development of PowerShell and Graph API automation for provisioning, reporting, and operational remediation; the candidate should write automation, not only run it.
• Production of documentation covering processes, standards, runbooks, and technical specifications, including identity and messaging architecture diagrams.

Ansible experience preferred; SailPoint and CyberArk integration knowledge desired.

Available for 24x7 escalation and on-call support as required.