L3 Support Engineer (Microsoft Infrastructure & Messaging)- Riyadh, KSA

We are seeking an experienced Infrastructure L3 Support Engineer to provide advanced administration, support, and troubleshooting for enterprise Microsoft infrastructure, messaging, virtualization, endpoint management, and security platforms. The role requires hands-on expertise in Microsoft Exchange, Windows Server technologies, Active Directory, Azure services, disaster recovery, virtualization, vulnerability remediation, and enterprise security solutions.

The ideal candidate will be responsible for ensuring high availability, security, performance, and compliance of enterprise infrastructure while collaborating with cross-functional IT and Cyber Security teams.

Key Responsibilities

•   Provide L3 administration and support for Microsoft Exchange Server (Exchange 2019 SE) in hybrid environments with Microsoft 365.
• Administer, maintain, and troubleshoot Windows Server infrastructure, Active Directory, DNS, DHCP, Group Policies (GPO), ADFS, and Entra Connect synchronization.
• Exchange administration including mailbox management, DAG health monitoring, transport troubleshooting, hybrid mail flow, and Enterprise Vault integration.
•   Manage enterprise email security platforms including Cisco IronPort Email Security Appliance (ESA), Trellix FireEye Email Security, CodeTwo email signature solutions.
•   Administer DDI solutions including EfficientIP and Infoblox for DNS, DHCP, and IP Address Management (IPAM).
•   Plan, execute, validate, and document Disaster Recovery (DR) drills for Exchange, Active Directory, Windows Servers, and supporting infrastructure to ensure business continuity.
• Manage virtualization infrastructure including VMware vSphere, ESXi, VxRail, and Nutanix HCI, including provisioning, migrations, performance tuning, troubleshooting, and decommissioning.
•   Administer Microsoft Entra ID (Azure AD), Azure PIM, Conditional Access, RBAC, Enterprise Applications, App Registrations, and Single Sign-On (SSO).
• Manage Microsoft Intune (MDM/MAM) for device compliance, application deployment, and endpoint configuration.
• Administer Microsoft Defender security solutions and collaborate with Cyber Security teams on security initiatives and compliance requirements.
• Manage Windows Server patching, application deployment, and endpoint lifecycle using ManageEngine Endpoint Central and PDQ Deploy.
• Administer ManageEngine solutions including ADManager Plus, AD360, Exchange Reporter Plus, and OpManager for identity management, reporting, monitoring, and operational health.
• Perform Windows Server hardening using Microsoft security baselines and Group Policy best practices.
• Identify, analyze, prioritize, and remediate Windows infrastructure vulnerabilities using Qualys Vulnerability Management reports and Microsoft security recommendations.
• Coordinate with Cyber Security teams to implement security controls, compliance standards, and vulnerability remediation activities.
• Monitor server performance, capacity, availability, and operational health across enterprise infrastructure.
• Support backup, recovery, and business continuity solutions along with Veeam Backup team.
• Administer enterprise security tools including Trend Micro and McAfee endpoint security solutions.
• Create automation scripts using PowerShell to streamline routine administration, monitoring, reporting, and operational tasks.
•   Support data center operations, vendor coordination, infrastructure upgrades, migrations, and change management activities.
• Prepare technical documentation, standard operating procedures (SOPs), knowledge articles, and operational runbooks.
•   Participate in major incident management, root cause analysis (RCA), problem management, and continuous service improvement initiatives.

Requirements

• Microsoft Windows Infrastructure
• Microsoft Exchange Server 2019 SE and Microsoft 365 Hybrid Exchange
• Windows Server Administration
• Active Directory Domain Services and Group Policy (GPO)
• DNS, DHCP, ADFS
• Microsoft Entra ID (Azure AD) and Entra Connect
• Azure PIM, Conditional Access and RBAC
• Enterprise Applications & App Registrations
• Messaging & Email Security - Cisco IronPort Email Security Appliance (ESA) & Trellix FireEye Email Security
• Enterprise Vault for Exchange
• Endpoint & Patch Management
• Microsoft Intune (MDM/MAM)
• Microsoft Defender
• ManageEngine Endpoint Central
• Virtualization & Infrastructure - VMware vSphere & Nutanix HCI
• Server Provisioning & Lifecycle Management
• Identity & Management Tools - ManageEngine Tools
• Security & Vulnerability Management, Windows Server Hardening & Microsoft Security Baselines
• Vulnerability Assessment & Remediation
• Disaster Recovery Planning & Testing
• Performance Tuning and Capacity Management
• Scripting and PowerShell Automation