{"id":2519905,"url":"https://alion.io/job/ultimate-peaks-senior-microsoft-infrastructure-exchange-engineer","title":"Senior Microsoft Infrastructure & Exchange Engineer","company":{"id":6188,"name":"Ultimate Peaks","domain":"ultimatepeaks.com","url":"https://alion.io/company/ultimatepeaks","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Riyadh, Saudi Arabia"],"countries":["SA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":37000,"max_usd":102000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":3299},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Incident Management","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Teams","optional":false},{"name":"PowerShell","optional":false},{"name":"Service Desk","optional":false},{"name":"TCP/IP","optional":false},{"name":"VLAN","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Microsoft Defender","optional":true}],"status":"live","first_seen_at":"2026-10-14T10:41:26Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-20T22:20:56Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Own the health, security, and continuity of the organisation's core Microsoft platform: Exchange Server 2019 (on-premises) in hybrid with Microsoft 365, Active Directory, Group Policy, DNS/DHCP, and the identity and email-security layers that sit on top of them. The role helps maintain reliable corporate messaging, mailbox availability, and identity services in a multi-site business environment.\nKEY Responsibilities\nCore: Microsoft Exchange (on-premises + hybrid)\nInstall, configure, administer, and upgrade Microsoft Exchange Server 2019 on-premises; apply cumulative updates and security patches on a controlled schedule.\nRun and maintain Exchange Hybrid with Microsoft 365: hybrid configuration, free/busy, cross-premises mail flow, and directory synchronisation health.\nExecute mailbox migrations (on-prem to/from Exchange Online) with zero-data-loss cutovers and a tested rollback for each wave.\nManage mailbox lifecycle, distribution and shared mailboxes, mail flow, transport rules, send/receive connectors, and certificate lifecycle (issuance, renewal, binding) with no lapsed-certificate outages.\nDesign, build, and maintain Database Availability Groups (DAG) for Exchange high availability; own failover testing and quorum health.\nDiagnose and resolve complex mail-delivery, queue, performance, and availability problems using message tracking, protocol logs, and transport diagnostics.\nCore: Active Directory & Group Policy\nPerform advanced Active Directory administration: domain services, sites, trusts, OU design, delegation, user authentication, and permissions.\nDesign, implement, troubleshoot, and optimise Group Policy (GPO): scope, precedence, security filtering, and drift control.\nAdminister and maintain DNS and DHCP as authoritative infrastructure services for the estate.\nOwn AD replication health, security hardening (privileged accounts, tiering), and disaster-recovery readiness for the directory (backup, forest/domain recovery runbook, tested restore).\nCore: Email Security\nAdminister the enterprise email-security gateway/solution: anti-spam, anti-phishing, malware protection, content filtering, quarantine management, and policy tuning.\nOwn the sender-authentication stack (SPF, DKIM, and DMARC) from monitoring through enforcement, and manage mail routing and inbound/outbound threat protection.\nInvestigate email-borne threats and phishing incidents with Information Security; tune policies to cut false positives without opening exposure.\nCore: Networking & Security\nApply working command of TCP/IP, DNS, routing, switching, firewalls, VPNs, VLANs, and NAT to keep messaging and identity reachable and secure.\nTroubleshoot network-layer faults affecting mail flow, hybrid connectivity, and authentication end to end.\nApply network-security principles and integrate cleanly across messaging, identity, cloud, and the security stack.\nCore: Microsoft 365, Identity & Automation\nAdminister Microsoft 365, Entra ID (Azure AD), and Single Sign-On (SSO): tenant configuration, conditional access, and application registrations in coordination with Information Security.\nBuild and maintain PowerShell scripting and automation for provisioning, reporting, bulk operations, and repeatable runbooks.\nOwn monitoring, backup, disaster recovery, patching, and infrastructure documentation for the messaging and identity estate; keep runbooks and topology current.\nGeneral\nProvide senior-level escalation for messaging, identity, and email-security incidents raised by IT Team Leaders and the Service Desk.\nMaintain up-to-date, formally registered technical documentation, standard operating procedures, and as-built diagrams.\nContribute to departmental KPI objectives set for the financial year.\nEnsure IT policies, security standards, and change-management procedures are followed.\nPerform other assignments as required.\nBusiness Continuity\nEnsure the messaging and identity BC/DR plans adequately deliver the required recovery capability and meet business continuity requirements.\nMaintain, test, and document DAG failover, AD recovery, and Exchange/M365 restore procedures on a periodic basis.\nCommunicate the implications of infrastructure changes that may impact the BCMS.\nParticipate in BC exercises; support the Business Impact Analysis for messaging and identity services.\nMake recommendations, remove roadblocks, and report continuity risk to IT management.\nWorking Arrangement (Onshore, Riyadh)\nBase: Riyadh, with on-site and hybrid working arrangements in line with organisational policy.\nHours: Standard working hours, with flexibility to support business needs.\nOn-call: Participates in an on-call rotation for critical messaging, identity, and email-security incidents, including outside standard working hours, in line with agreed response targets.\nChange windows: Executes major changes (upgrades, migrations, DAG/AD maintenance) inside approved maintenance windows, typically outside peak, with change-management sign-off.\nAccess & security: Follows applicable information security, data-handling, and privileged-access controls.\nCompetencies: Professional and Technical\nBehavioral Competencies\nCompetency Level\nAnalytical Thinking Level 4\nInitiative Level 3\nContinuous Learning Level 3\nCommunication (written & verbal) Level 3\nStress Management Level 3\nPlanning & Organizing Level 3\nAdaptability Level 3\nTeamwork Level 3\nTechnical Competencies\nCompetency Proficiency\nMicrosoft Exchange Server 2019 (on-prem + hybrid, DAG) Expert\nExchange migrations & mail flow / connectors / certificates Expert\nActive Directory & Group Policy (design, DR, replication) Expert\nDNS / DHCP / domain services Advanced\nEmail security (gateway, SPF/DKIM/DMARC, anti-phishing) Advanced\nMicrosoft 365 / Entra ID / SSO / Conditional Access Advanced\nPowerShell scripting & automation Advanced\nNetworking & network security (TCP/IP, firewall, VPN, VLAN, NAT) Intermediate to Advanced\nBackup, DR, patching & infrastructure documentation Advanced\nCritical incident management Advanced\nCompetencies: EHS\nAwareness of basic EHS requirements and corporate objectives; awareness of EHS/incident reporting within the QEHS management system.\nOrganizational Competencies\nIntermediate. Refer to the organisation's applicable competency framework.\nDecision Making\nDecides and executes: messaging/identity configuration, patch and change execution within approved windows, migration cutover mechanics, GPO and email-security policy tuning, and automation design. Recommends and routes up: architecture changes, tenant-level identity/security policy, BC/DR strategy, and major-version platform decisions (to the relevant IT infrastructure and Information Security leadership).\nKey Performance Indicators (KPIs)\nMaintain high availability of messaging services and prevent avoidable outages through timely certificate management and patching.\nRespond to critical messaging and identity incidents within agreed targets, restore services promptly, and document root causes.\nMailbox migration waves delivered on schedule with zero data loss and a tested rollback per wave.\nKeep systems patched in line with approved security baselines and remediate critical vulnerabilities within required timeframes.\nEmail security: SPF/DKIM/DMARC at enforcement; measured reduction in delivered phishing/spam with controlled false-positive rate.\nTest business continuity and disaster recovery procedures periodically and document successful recovery tests.\nMaintain current technical runbooks and infrastructure documentation for all owned services.\nMeet the individual KPIs agreed for the current financial year.\nLevel 3 Engineer of Microsoft Exchange 2019 and Exchange Server Subscription Edition. Have proven experience in installation and upgrade of Microsoft Exchange Environment-Expert.\nHybrid environment Microsoft 365 ability to manage Microsoft Teams. Active Directory and understanding of Group Policies\nRequirements\nQualification: Education and Experience\nLanguage: Arabic (native) and English (professional working proficiency).\nEducation: Bachelor's degree in Computer Science, Information Technology, or a related field. Equivalent experience with strong certification is acceptable in lieu of the degree.\nExperience: For a fully-fledged senior, 8+ years in enterprise Microsoft infrastructure, of which 5+ years hands-on with Exchange Server (2016/2019) on-premises and Exchange hybrid with Microsoft 365, in a mid-to-large, multi-site enterprise environment, with a full Exchange migration and a DAG deployment owned. A strong mid-senior Saudi national (6+ years) with solid Active Directory / Entra ID / Microsoft 365 depth and a genuine appetite to master on-prem Exchange is acceptable and encouraged under the organisation's development pathway, entering on a structured certification ramp (see the development plan).\nCertifications:\nStrongly preferred: MCSE: Messaging or MCSE: Server Infrastructure (or legacy MCITP: Enterprise Messaging), evidencing Exchange + AD depth. For a mid-senior entrant, these become ramp targets.\nPreferred: Microsoft 365 Certified: Messaging Administrator Associate (MS-203); Enterprise Administrator Expert (MS-102); Identity and Access Administrator (SC-300); Windows Server Hybrid Administrator (AZ-800/AZ-801).\nNice-to-have: email-security vendor certification (Proofpoint / Mimecast / Microsoft Defender for Office 365), a networking cert (CCNA-level), and a security baseline (SC-900 / Security+).","description_format":"text","description_chars":9440,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Arabic","level":"Proficiency (C2)","optional":false},{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Continuous learning","Hybrid work"],"hiring_locations":[{"name":"Saudi Arabia","iso":"SA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Recruiting & Staffing","Executive Search"],"lifecycle":[{"event":"open","at":"2026-10-14T10:41:26Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":5,"expected_fill_days":35,"reasons":["conf:0","win:early"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/ultimate-peaks-senior-microsoft-infrastructure-exchange-engineer","json_url":"https://alion.io/job/ultimate-peaks-senior-microsoft-infrastructure-exchange-engineer.json","meta":{"generated_at":"2026-10-21T01:45:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2546,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6188},"rest":"https://alion.io/mcp/rest/get_company?id=6188"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fultimate-peaks-senior-microsoft-infrastructure-exchange-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fultimate-peaks-senior-microsoft-infrastructure-exchange-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fultimate-peaks-senior-microsoft-infrastructure-exchange-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ultimate-peaks-senior-microsoft-infrastructure-exchange-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fultimate-peaks-senior-microsoft-infrastructure-exchange-engineer"}]}