Systems Engineer – Messaging & Groupware

About the role

The Systems Engineer will own vulnerability remediation, patch deployment and security hardening for Active Directory, Windows Server, Microsoft Exchange (on‑premises and hybrid) and Microsoft Entra ID (Azure AD). The role ensures the confidentiality, integrity and availability of identity and messaging platforms in a large‑enterprise or banking environment.

Key responsibilities

• Manage the end‑to‑end vulnerability lifecycle using Qualys and Microsoft Defender, prioritising remediation based on CVSS, exploitability and business impact.
• Plan, test and execute patching for AD Domain Controllers, Exchange servers, hybrid components and Windows servers while minimising downtime.
• Monitor and remediate identity vulnerabilities in Entra ID and Azure AD Connect, including MFA/CA configurations.
• Maintain hybrid mail flow, troubleshoot routing and authentication issues, and ensure services such as Free/Busy and Autodiscover remain operational.
• Conduct pre‑patch risk assessments, validate backups, perform rolling patch deployments and post‑patch health checks.
• Ensure compliance with PCI‑DSS, ISO and other regulatory frameworks, producing audit‑ready reports and evidence.
• Develop PowerShell automation for vulnerability tracking, reporting and dashboard creation.
• Participate in a 24x7 on‑call rotation to resolve critical incidents promptly.

Required profile

• 4–7 years of experience in Microsoft infrastructure environments, preferably in large‑enterprise or banking sectors.
• Strong communication and coordination skills, with exposure to regulatory and audit frameworks.
• Hands‑on experience with hybrid Exchange and Entra ID deployments.

Required skills

• Microsoft Entra ID (Azure AD)
• Microsoft Defender
• Patch Management
• Windows Server
• Azure AD Connect
• Vulnerability Management
• Microsoft Exchange (on‑premises & hybrid)
• PowerShell
• Qualys