DescriptionThe Directory Services & Messaging Manager will serve as a hands-on leader within the IT Infrastructure and Operations organization, leading an enablement team responsible for the design, architecture, deployment, and support of Active Directory, Entra ID, Azure, Exchange hybrid and Exchange Online, Microsoft 365, Intune, Purview, and related identity, messaging, and collaboration services. This role combines people leadership and service ownership with direct technical engagement. Leading a small, senior team, the manager will set priorities, develop the team, coordinate delivery, contribute to architecture and design decisions, develop and review automation, troubleshoot complex issues, lead major incident responses, and collaborate with engineers to deliver secure, dependable, and supportable solutions.
Responsibilities include, but are not limited to:
- Lead and develop a team responsible for directory, messaging, Microsoft 365, Azure, and endpoint services.
- Manage/Own hybrid identity architecture across Active Directory and Entra ID, including identity synchronization, authentication methods, directory-integrated services (DNS,Kerberos,GPOs,PKI), and operational support for Microsoft 365 and Azure access.
- Manage Conditional Access, MFA, RBAC, app registrations, enterprise apps, consent governance, and Key Vault.
- Own Hybrid Exchange, mail flow, SMTP relay, and Proofpoint. Manage migration to Exchange Online
- Support Teams, SharePoint Online, OneDrive, Intune, Workspace ONE, and Microsoft 365 operations.
- Support Purview for retention, labels, DLP, eDiscovery, legal hold, and audit.
- Govern Power Platform environments, DLP policies, and connectors.
- Partner with Security, DevOps, Business Solutions, Cloud, and IT teams on secure solutions.
- Serve as the escalation point and own the 24x7 on-call model.
QualificationsThe successful candidate will meet the following qualifications:
- 7+ years of progressive IT infrastructure experience in large hybrid enterprise environments, including hands-on technical ownership and leadership across identity, messaging, cloud, and endpoint platforms
- 5+ years leading technical staff with accountability for delivery, execution, platform ownership, and cross-functional outcomes while remaining technically active.
- Expert-level knowledge and experience in the design, implementation, and support of the following:
- Active Directory and Entra ID, including hybrid identity, PKI, DNS, GPO administration, and directory-integrated authentication.
- Exchange hybrid and Exchange Online, including transport, namespace, and coexistence design.
- Identity security controls, including OAuth, SSO, MFA, conditional access, access reviews, privileged access, and hybrid identity integration patterns.
- Deep hands-on experience with the following:
- Azure administration, including subscription and resource organization, Azure and Entra RBAC, app registrations, service principals, managed identities, consent governance, and Key Vault.
- Microsoft 365 services, including Teams, SharePoint Online, and OneDrive.
- Endpoint management platforms, including Intune and Workspace ONE.
- Microsoft Purview, including retention, sensitivity labels, DLP, eDiscovery, and audit.
- Mail hygiene and secure email gateway administration, including Proofpoint.
- Windows Server administration across current supported versions.
- Demonstrated experience in the following:
- Hands-on design and execution of an enterprise Exchange Online migration, including hybrid transport, namespace, and coexistence.
- Development of PowerShell and Graph API automation for provisioning, reporting, and operational remediation; the candidate should write automation, not only run it.
- Production of documentation covering processes, standards, runbooks, and technical specifications, including identity and messaging architecture diagrams.
- Ansible experience preferred; SailPoint and CyberArk integration knowledge desired.
- Available for 24x7 escalation and on-call support as required.
