{"id":3862194,"url":"https://alion.io/job/pearson-staff-cloud-services-engineer","title":"Staff Cloud Services Engineer","company":{"id":34029,"name":"Pearson","domain":"pearson.com","url":"https://alion.io/company/pearson","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":81,"open_postings":25,"ghost_share":0,"stale_share":0.76,"repost_share":0,"time_to_fill_p50_days":26,"computed_at":"2026-11-06T05:58:05Z"}},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India","Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"Jira","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Power Automate","optional":false},{"name":"PowerShell","optional":false},{"name":"Service Desk","optional":false},{"name":"ServiceNow","optional":false},{"name":"ITIL","optional":true}],"status":"live","first_seen_at":"2026-11-06T07:30:29Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T02:02:14Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Job Title - Staff Cloud Service Engineer III (Microsoft 365 Email Security & SMTP)\nRole Overview\nWe are seeking an experienced Email Security & Microsoft 365 Messaging Engineer to own engineering, operation and continuous improvement of enterprise email platform, mail flow and email security services across a global estate. This is a hands-on technical role for a professional who can take ownership of complex incidents and engineering work, not an entry-level or developmental position.\nThe successful candidate will manage, evolve, support Exchange Online, Microsoft Defender for Office 365, Microsoft Purview, Cisco secure email gateways, SMTP relay services Public DNS configuration and hygiene adhering to industry standards. They will work with security, identity, network and application teams, and with suppliers, to keep email secure, deliverable, compliant and reliable.\nKey Responsibilities\nManage the configuration of Cisco secure email gateways, including inbound and outbound routing, policies, quarantine and encryption.\nDesign, manage and troubleshoot Exchange Online services, including transport rules, connectors, accepted and remote domains, mailbox and distribution group settings, and migrations.\nDesign, configure and optimize Microsoft Defender for Office 365 policies, including anti-spam, anti-phishing with impersonation protection, anti-malware, Safe Links, Safe Attachments and pre-set security policies.\nOwn email authentication for all company domains: SPF, DKIM, DMARC\nDesign and support SMTP relay and application email services\nOnboard and govern applications, devices (such as multifunction printers and scanners) and SaaS platforms that send email on behalf of company domains, making sure they are authenticated, approved and documented.\nInvestigate and remediate phishing, business email compromise, spoofing and malware campaigns with the Security Operations team, using Threat Explorer, message trace, Advanced Hunting and automated investigation and response.\nMonitor mail flow health, deliverability, queue and reputation issues, using Exchange Admin Centre, Defender portal, message trace, Microsoft 365 Service Health and gateway reporting.\nSupport Microsoft Purview controls that apply to email: data loss prevention, sensitivity labels, message encryption, retention, eDiscovery and journaling.\nUse ServiceNow and Jira to manage incidents, requests, problems, changes and project activities in line with operational processes.\nCreate and maintain designs, runbooks, mail flow diagrams, standards, domain and sender inventories, and knowledge articles.\nProvide clear technical guidance and knowledge transfer to service desk teams, application owners and other engineers.\nRole Scope & Technical Ownership\nThis is an experienced engineering role responsible for independently handling complex work, making sound operational decisions and contributing to the technical direction of messaging and email security. It includes broad technical ownership across:\nSMTP relay services for applications, devices and third-party platforms.\nExchange Online, and mail flow architecture, including routing through secure email gateways.\nMicrosoft Defender for Office 365 and the wider email threat protection stack.\nDomain and sender governance: SPF, DKIM, DMARC enforcement and the inventory of approved senders.\nEmail-related identity and access controls, including Conditional Access, modern authentication and the removal of legacy protocols.\nEmail data protection and compliance with Microsoft Purview.\nTechnical leadership during email incidents, including deciding when to block, quarantine, reroute, roll back a change, escalate or engage a specialist.\nGlobal service delivery, Incident, Change and Problem Management, root-cause analysis and preventative actions.\nAutomation with PowerShell (Exchange Online, Microsoft Graph), Power Automate and Logic Apps to improve operations and reporting.\nMentoring less-experienced engineers and service desk teams.\nSkills & Experience\nExchange Online & Messaging\nHands-on professional experience engineering and supporting Exchange Online in a large enterprise.\nStrong knowledge of mail flow: connectors, transport rules, accepted domains, centralized mail transport, and routing through third-party gateways.\nExperience with mailbox types, shared and resource mailboxes, distribution and Microsoft 365 groups, permissions and migrations.\nConfident use of message trace, Exchange Admin Centre, Microsoft 365 Service Health and Microsoft support escalation.\nEmail Security\nPractical experience configuring and tuning Microsoft Defender for Office 365\nExperience administering secure email gateway\nDetailed understanding of SPF, DKIM, DMARC, ARC, MTA-STS and TLS, and experience moving domains to DMARC enforcement.\nExperience investigating phishing, spoofing and business email compromise with Security Operations teams.\nWorking knowledge of email encryption, data loss prevention and sensitivity labels in Microsoft Purview.\nSMTP & Application Email\nDeep understanding of SMTP: the protocol, headers, response codes, TLS negotiation, MX and DNS records, and bounce (NDR) analysis.\nExperience designing and supporting SMTP relay for applications and devices, including authenticated submission, connector-based relay and third-party relay services.\nExperience planning and delivering the retirement of Basic Authentication and legacy SMTP AUTH.\nAbility to diagnose deliverability problems blocklists, IP and domain reputation, throttling, and recipient-side rejections.\nIdentity, Automation & Operations\nWorking knowledge of Entra ID, Conditional Access, modern authentication and licensing as they apply to messaging.\nStrong PowerShell skills (Exchange Online module, Microsoft Graph); experience with Power Automate or Logic Apps is desirable.\nWorking understanding of DNS, firewalls, proxies and TLS certificates.\nStrong systematic troubleshooting: restore service first, then complete root-cause analysis.\nExperience managing incidents and changes through ServiceNow or a comparable IT service management platform.\nCommunication & Customer Support\nAbility to explain technical issues clearly to the audience and give concise, actionable updates.\nComfortable working under time pressure, for example during an active phishing campaign, while keeping sound judgement.\nProfessional written and spoken English suitable for global engineering, security and business teams.\nPersonal Attributes\nAccountable: owns technical issues from first diagnosis through restoration, escalation and closure.\nSecurity-minded: balances protection against deliverability and user experience, and document why each decision was made.\nCalm, methodical and decisive during live incidents such as phishing campaigns or mail flow outages.\nCurious and committed to keeping up with changes in Microsoft 365, email standards and the threat landscape.\nConfident making recommendations, and comfortable admitting knowledge gaps and bringing in specialists.\nCollaborative and non-territorial, working well with security, identity, network and application teams.\nOrganized and detail-oriented, with a commitment to documentation, standards, change control and knowledge transfer.\nRespectful and constructively challenging, able to push back on risky sender or relay requests without undermining colleagues.\nComfortable working independently while staying connected to a globally distributed team.\nDesired Overall Candidate Profile\nThe ideal candidate is a strong messaging engineer who understands email end to end from SMTP and DNS on the wire, through Exchange Online and the security stack, to the people and applications that depend on it. They are neither only an Exchange administrator nor only a security analyst.\nThey do not need expert knowledge of every product. More important is the breadth to understand how mail flow, security controls, identity and DNS interact, to isolate the likely fault quickly, and to engage the right specialists when needed.\nHands-on Exchange Online and email security experience, strong SMTP troubleshooting, calm decision-making, clear communication and the ability to work at an experienced engineering level within a collaborative global team are essential.\nDesirable Qualifications & Vendor Experience\nMicrosoft 365 Certified: Messaging Administrator Associate, or equivalent experience.\nMicrosoft Certified: Security Operations Analyst Associate (SC-200) or Information Protection Administrator Associate (SC-400).\nVendor training or certification from Proofpoint, Mimecast, Egress or a similar email security provider.\nExperience with DMARC reporting platforms.\nExperience in a large enterprise with many domains, business units or acquired companies.\nExperience supporting mergers, acquisitions or divestments: domain migration, coexistence and mail routing during transition.\nITIL Foundation or equivalent service management knowledge.","description_format":"text","description_chars":8935,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["EdTech Platforms","Publishing","E-learning"],"lifecycle":[{"event":"open","at":"2026-11-06T10:10:32Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":26,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-07T03:13:54Z"},"pay":null,"html_url":"https://alion.io/job/pearson-staff-cloud-services-engineer","json_url":"https://alion.io/job/pearson-staff-cloud-services-engineer.json","meta":{"generated_at":"2026-11-07T03:13:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7761,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":34029},"rest":"https://alion.io/mcp/rest/get_company?id=34029"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpearson-staff-cloud-services-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpearson-staff-cloud-services-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpearson-staff-cloud-services-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pearson-staff-cloud-services-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpearson-staff-cloud-services-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3862194}},{"tool":"search_jobs","arguments":{"company":"pearson.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3862194},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}