Global Messaging Architect

This is a fully remote position, open to applicants in New York.

📋 Description

• Establish and uphold the global messaging architecture across Exchange Online, M365, and integrated security/compliance platforms.

• Create and implement governance models, standards, and best practices for secure and scalable messaging services.

• Drive messaging strategy during mergers, acquisitions, divestitures, and rebranding efforts.

• Design and manage global mail routing, security filtering, SPF/DKIM/DMARC authentication, and hybrid coexistence.

• Lead engineering teams in monitoring, troubleshooting, and optimizing the performance of mail and calendaring systems.

• Collaborate with Global Security Operations on phishing defense, vulnerability patching, and threat detection.

• Offer architectural guidance for integrations with collaboration tools such as Teams, Slack, and Zoom.

• Ensure adherence to compliance standards including SOX, PCI, GDPR, PIPL, and HIPAA through secure design and retention/eDiscovery controls.

• Develop architecture for journaling, litigation holds, retention, and regulatory reporting in partnership with Legal and Compliance.

• Manage role-based administration, privileged access, and identity controls across messaging platforms.

• Act as an enterprise subject matter expert for messaging, influencing cross-functional roadmaps and vendor strategies.

• Counsel executives and senior leadership on risk management, cost optimization, and strategic messaging investments.

• Mentor engineers and administrators while fostering adherence to best practices.

⛳️ Requirements

• Bachelor's degree in computer science, Information Technology, Engineering, or a related field, or equivalent hands-on experience.

• Over 8 years of experience in identity and access management and enterprise infrastructure.

• Proven experience leading identity architecture and delivery for large-scale, hybrid environments.

• Expert-level knowledge of Microsoft 365, including Exchange Online, Teams Online, and SharePoint Online.

• Expert-level knowledge of Google Workspace.

• Expert-level knowledge of Okta Identity Cloud, including SSO, MFA, Workflows, Lifecycle Management, and Identity Governance.

• Expert-level knowledge of Microsoft Active Directory, covering forest/domain design, GPOs, trusts, and replication.

• Expert-level knowledge of Microsoft Entra ID / Azure AD, including hybrid join, conditional access, and identity federation.

• Experience with messaging separation or integration during complex M&A activities.

• Experience with domain consolidation, rebranding, and tenant-to-tenant migrations.

• Experience designing mail routing and coexistence between acquired or divested entities.

• Experience implementing SPF, DKIM, DMARC, MTA-STS, and DANE.

• Experience with anti-phishing and advanced threat protection solutions such as Mimecast, Proofpoint, and Microsoft Defender for Office 365.

• Experience in developing global monitoring and alerting frameworks for messaging health, performance, and mail flow.

• Preferred certifications include Microsoft Exchange Server 2019 / Exchange Online Expert, Mimecast Certified Specialist / Engineer, Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft Certified: Azure Solutions Architect Expert, CISSP, GIAC certifications, and training/certification in Zero Trust Architecture, PIM/PAM Design, or IAM Governance.

🏝️ Benefits

• Base rate.

• Short- and long-term incentives, as applicable.

• Opportunities for growth and development.

• Health care benefits.

• Retirement plans.

• Vacation and other paid time off.

• Additional offerings.

• Reasonable accommodations for qualified individuals with disabilities.