Windows Systems Engineer

Scope of Services
The scope of services required for this Systems Engineer includes senior-level support for the Messaging, Active Directory & Identity management team with an emphasis on Operations security. The candidate will be responsible for security administration of all Active Directory forests and domains and the Microsoft Exchange electronic mail and calendaring platform within the Judicial Branch. The Solution Architect will assist with the tuning and optimization of the Exchange environment, ensuring email security, and may be involved in migration activities as well as providing high-level support for problem resolution. Also, in scope is providing support and the design of a Microsoft identity management infrastructure in collaboration with Microsoft Azure to fulfill the access and authentication requirements of users.

Duties

• Expert-level Windows 2019/2016 Active Directory and domain controller design, implementation, and administration
• Expert-level health and performance monitoring of a Microsoft Exchange environment and all its components and interfaces. Take preventive or corrective action as needed to maintain system availability and performance standards. Monitor logs, message flows, queues, quotas, storage, and other resource,s taking appropriate preventive or corrective action as needed
• Manage and administer the e-mail data stores and database availability groups (DAGs) to deliver optimal performance and availability
• Develop process and adhere to eDiscovery and Litigation hold requests
• Respond to escalated helpdesk tickets, resolve system and user problems and provide assistance as needed
• Expert-level ongoing support and architecture planning for the Microsoft Identity Manager 2016 codeless environment, following all best practices from Microsoft
• Work with legacy application owners to integrate their data into the Microsoft IDM metaverse and flow into Active Directory
• MIM group management, password portal, integration with SQL management agents and ADFS
• Expert level knowledge on deploying and architecting System center configuration manager SCCM version 1902
• Audit, test, schedule and install patches using SCCM and other operating system components as well as upgrades to Exchange servers as needed
• Administer MIM 2016, Microsoft Exchange and Active Directory high availability, disaster recovery, backup and restoration of the entire system as well as individual components such as files and end user mailboxes
• Experience with performance tuning for Active directory, Exchange server and Microsoft MIM environments in a 24 x 7 environment
• Develop, implement and document configuration standards, policies and procedures for managing, operating, and ensuring the security of the MIM 2016, Exchange & Active Directory infrastructure
• Manage Outlook Web App (remote mail access), mail routing protocols, relays, gateways, email encryption and security, interfaces and transports to external mail systems and provide support for mobile devices and phones
• Administer the mail system anti-spam, anti-virus appliances (IronPort)
• Expert level knowledge in auditing and managing Palo Alto TRAPS and MalwareBytes antivirus products for all servers
• Experienced with working in CritSit (critical situation) such as data breach, malware/ransomware attack and disaster recovery with minimal or no supervision
• Experience and expert level knowledge in implementing multi-factor authentication for users for applications such as webmail and other federated apps
• Manage Branch-wide standards for Exchange, AD and Identity Management

The duties required of this position requires strong knowledge and expertise with designing, implementing, and supporting the following technologies:

• Active directory
• Microsoft Exchange server 2016/2019
• Windows Server 2008 R2, 2012, 2016 and 2019
• Microsoft Identity manager 2016
• System center configuration manager (SCCM)
• Cisco IronPort email gateway
• Email encryption products
• Infrastructure auditing products
• Active directory federation services
• Office 365 Tenant configuration
• Office 365 Hybrid configuration
• Access Control and Conditional Access (CA)
• Azure Active Directory (AAD) and AAD Connect
• Password Hash sync
• Microsoft Federation Integration with Office 365, Azure and Identity Management
• Multi Factor Authentication (MFA) with Azure
• Advance Threat Protection (ATP) policies
• Palo Alto TRAPS administration
• Malwarebytes cloud deployment

Qualifications and Certifications:

• 10+ years of Expert level direct hands-on Microsoft Exchange and Active Directory administration experience
• 5+ years of Microsoft identity manager, SCCM and email security experience
• Strong understanding of SMTP e-mail flow and related transport/DNS configuration
• Experience with server virtualization technology including configuring and managing virtual servers preferably in a VMware environment
• Strong understanding of AD forests, domains, trusts, DHCP, DNS and group policy as it relates to Active directory
• Experience configuring and managing high-availability server environments using local and remote clustering and network load balancing technologies
• Scripting experience in languages such as PowerShell
• Experience developing and testing offsite disaster recovery plans

Required/Preferred Certifications:

• Microsoft Certified Solutions Expert O365 Enterprise Administrator Expert
• Microsoft 365 Certified Messaging Administrator
• Associate Microsoft Certified Professional
• Microsoft Exchange 2016 certification
• ITIL V3