Email Security Engineer

This is a fully remote position, open to applicants in Iowa.

📋 Description

• Provide advanced engineering and architectural support for the company’s Exchange environment, encompassing Exchange Online, Office 365, hybrid, and on-premises systems.

• Design, support, and enhance enterprise messaging capabilities covering email, SMTP, distribution lists, shared mailboxes, transport services, and mail flow integrations.

• Oversee operational support for Exchange security platforms and controls, including Proofpoint, DMARC, SPF, DKIM, EOP, and associated third-party messaging gateways.

• Collaborate with Managed Security Services resources, Microsoft, third-party vendors, security operations, infrastructure, and application teams.

• Diagnose complex issues, manage escalations, enhance security posture, and ensure messaging services are reliable, secure, compliant, and in line with enterprise architectural standards.

• Manage and coordinate changes affecting messaging and related applications.

• Lead incident response efforts for incidents that impact mail and associated applications.

• Provide senior-level engineering support for Exchange Online, hybrid Exchange, on-premises Exchange, SMTP relay, transport, and related messaging services.

• Offer architectural support for mail flow, Exchange topology, hybrid connectivity, identity integration, security controls, and future-state messaging roadmaps.

• Oversee change management, release management, testing, operational readiness, and transition acceptance.

• Deliver projects for Exchange user migrations and Active Directory data integration with messaging platforms.

• Communicate and engage with internal and external stakeholders affected by service disruptions, additions, changes, or reductions in service.

• Uphold information security and compliance within the messaging environment.

• Administer and enhance Exchange security tools and controls, such as anti-phishing, anti-spoofing, email authentication, quarantine, policy tuning, and secure mail routing.

• Investigate email security events, coordinate response actions, fine-tune detections and policies, and support ongoing improvements in messaging security operations.

• Lead sophisticated troubleshooting and root-cause analysis for escalated messaging, mail flow, authentication, delivery, and security incidents.

• Maintain and review knowledge-base articles and documentation.

⛳️ Requirements

• Senior-level experience in architecting, engineering, administering, and supporting enterprise Exchange environments, including Exchange Online, Microsoft 365, Exchange hybrid, and on-premises Exchange.

• Strong practical experience with Exchange security tools and messaging gateways such as Proofpoint, Cisco, Mimecast, Microsoft EOP, and related mail sanitation and threat protection platforms.

• Hands-on experience with Microsoft Exchange Server 2019/SE and Office 365.

• In-depth understanding of Exchange transport, SMTP, TLS, connectors, mail routing, hybrid mail flow, accepted domains, relays, and message hygiene controls.

• Good understanding of Exchange databases, MBX, and CAS server model.

• Good understanding of Active Directory and Azure Active Directory.

• Good understanding of O365 Licensing services and offerings.

• Experience in implementing and managing Microsoft Exchange Online.

• Working knowledge of implementing compliance policies and RBAC model.

• Some understanding of PowerShell scripting for writing scripts to implement changes and troubleshoot issues for a large number of users.

• Experience in implementing whitelisting, relays, and compliance in messaging gateways and EOP (Exchange Online Protection).

• Experience in implementing and supporting email authentication and domain protection controls, including DMARC, SPF, DKIM, domain alignment, spoofing protection, and reporting-based remediation.

• Experience collaborating with MSS providers, SOC teams, and security operations resources to manage email security incidents, fine-tune controls, review detections, and support operational handoffs.

• Experience working with vendors, SLAs, product roadmaps, and support lifecycles.

• Understanding of Directory Synchronization, AD Connect, and Microsoft Entra Connect sync.

• ITIL and Microsoft certifications are a plus.

• Experience in Active Directory and Microsoft Exchange hybrid servers is desirable.

• Strong verbal and written communication skills.

• Experience managing externally contracted team resources.

• Experience partnering with vendors and suppliers.

• Ability to collaborate with cross-functional global teams.

🏝️ Benefits

• Numerous development opportunities available to enhance your skills.

• Join a company with a higher purpose and contribute to making the world a better place.

• Health benefits for you and your family effective from your first day of employment.

• Four weeks of paid time off and two weeks of well-being pay annually, in addition to paid holidays.

• Excellent parental leave policy, offering a minimum of 16 weeks for both mothers and fathers.

• Competitive retirement savings plan.

• Tuition reimbursement program.