Senior Microsoft Infrastructure & Exchange Engineer

About the Role

Ultimate Peaks Talent & Strategy is seeking a Senior Microsoft Infrastructure & Exchange Engineer to join their team in Riyadh, Saudi Arabia. This full-time role is critical for maintaining the health, security, and continuity of the organization's core Microsoft platform, including Exchange Server 2019 (on-premises) in a hybrid configuration with Microsoft 365, Active Directory, Group Policy, DNS/DHCP, and associated identity and email-security layers. The position ensures reliable corporate messaging, mailbox availability, and identity services within a multi-site business environment.

Key Responsibilities

• Install, configure, administer, and upgrade Microsoft Exchange Server 2019 on-premises, applying cumulative updates and security patches on a controlled schedule.
• Manage and maintain Exchange Hybrid with Microsoft 365, including configuration, free/busy functionality, cross-premises mail flow, and directory synchronization health.
• Execute mailbox migrations (on-prem to/from Exchange Online) with zero-data-loss cutovers and tested rollback procedures.
• Administer mailbox lifecycle, distribution and shared mailboxes, mail flow, transport rules, send/receive connectors, and certificate lifecycle.
• Design, build, and maintain Database Availability Groups (DAG) for Exchange high availability, including failover testing and quorum health.
• Diagnose and resolve complex mail-delivery, queue, performance, and availability problems using message tracking, protocol logs, and transport diagnostics.
• Perform advanced Active Directory administration, including domain services, sites, trusts, OU design, delegation, user authentication, and permissions.
• Design, implement, troubleshoot, and optimize Group Policy Objects (GPO), managing scope, precedence, security filtering, and drift control.
• Administer and maintain DNS and DHCP as authoritative infrastructure services.
• Ensure AD replication health, security hardening (privileged accounts, tiering), and disaster-recovery readiness for the directory.
• Administer the enterprise email-security gateway/solution, including anti-spam, anti-phishing, malware protection, content filtering, quarantine management, and policy tuning.
• Manage the sender-authentication stack (SPF, DKIM, and DMARC) from monitoring through enforcement, and oversee mail routing and inbound/outbound threat protection.
• Investigate email-borne threats and phishing incidents with Information Security, tuning policies to reduce false positives.
• Apply TCP/IP, DNS, routing, switching, firewalls, VPNs, VLANs, and NAT knowledge to ensure messaging and identity are reachable and secure.
• Administer Microsoft 365, Entra ID (Azure AD), and Single Sign-On (SSO), including tenant configuration, conditional access, and application registrations.
• Develop and maintain PowerShell scripting and automation for provisioning, reporting, bulk operations, and repeatable runbooks.
• Oversee monitoring, backup, disaster recovery, patching, and infrastructure documentation for the messaging and identity estate.
• Provide senior-level escalation support for messaging, identity, and email-security incidents.
• Maintain up-to-date technical documentation, standard operating procedures, and as-built diagrams.
• Ensure messaging and identity BC/DR plans deliver required recovery capability and meet business continuity requirements.
• Maintain, test, and document DAG failover, AD recovery, and Exchange/M365 restore procedures periodically.

Qualifications and Requirements

• 5-10 years of experience in Microsoft infrastructure and Exchange engineering.
• Proven experience as a Level 3 Engineer for Microsoft Exchange 2019 and Exchange Server Subscription Edition, with expertise in installation and upgrade of Microsoft Exchange environments.
• Demonstrated ability to manage Microsoft 365 hybrid environments, including Microsoft Teams, Active Directory, and Group Policies.
• Strong understanding of network-layer fault troubleshooting affecting mail flow, hybrid connectivity, and authentication.
• Proficiency in applying network-security principles and integrating across messaging, identity, cloud, and security stacks.

Work Environment

This role is based in Riyadh, Saudi Arabia, with on-site and hybrid working arrangements in line with organizational policy. Standard working hours apply, with flexibility to support business needs. The position involves participation in an on-call rotation for critical messaging, identity, and email-security incidents, including outside standard working hours. Major changes are executed within approved maintenance windows, typically outside peak hours, with change-management sign-off. Adherence to information security, data-handling, and privileged-access controls is required.

Key Performance Indicators

• Maintain high availability of messaging services and prevent outages through timely certificate management and patching.
• Respond to critical messaging and identity incidents within agreed targets, restore services promptly, and document root causes.
• Deliver mailbox migration waves on schedule with zero data loss and tested rollback per wave.
• Keep systems patched in line with approved security baselines and remediate critical vulnerabilities within required timeframes.
• Ensure email security (SPF/DKIM/DMARC) is at enforcement, with a measured reduction in delivered phishing/spam and a controlled false-positive rate.
• Periodically test business continuity and disaster recovery procedures, documenting successful recovery tests.
• Maintain current technical runbooks and infrastructure documentation for all owned services.
• Meet individual KPIs agreed for the current financial year.

Application Process

Interested candidates are encouraged to apply. Salary information will be disclosed during the interview process.