Exchange & Security Administrator, AVP

Who we are looking forState Street is looking for an M365 Exchange & Security Engineer to become part of our Collaboration Services team in Boston. Why this role is important to usThe role will help deliver the Collaboration Services roadmap, modernize mail flow and threat-protection capabilities, strengthen operational resilience and provide support for business and technical users of these services. Working with the tower lead, architects, engineers, operations teams and key control partners, the engineer will be responsible for requirements gathering, solution engineering, implementation, documentation and advanced support across Exchange and email security. What you will be responsible forAs the Collaboration Services M365 Exchange & Security Engineer you will Engineer, configure and support Exchange Online, Exchange hybrid and remaining on-premises Exchange services, including mail flow, transport rules, connectors, accepted domains, certificates, TLS, message routing, RBAC and service integrations. Engineer and support Microsoft Defender for Office 365 and third-party email security services, including anti-phishing, anti-spam, anti-malware, Safe Links, Safe Attachments, quarantine and threat investigation. Design, test and implement roadmap changes such as Exchange Server Subscription Edition lifecycle work, mailbox and public-folder migrations, cloud mail-flow modernization, legacy platform decommissioning and retirement of technical debt. Provide advanced engineering support for production issues involving mail flow, message tracing, delivery failures, permissions, authentication, certificates, encryption, service health and Microsoft 365 interoperability. Support secure onboarding of applications and platforms to Exchange services, including SMTP relay, connectors, service principals, APIs and approved automation accounts. Support email encryption and data-protection capabilities, including Microsoft Purview Message Encryption, RMS behaviour, external recipient experience and integration with third-party email security and DLP platforms. Provide advanced support during major incidents, lead technical troubleshooting, engage Microsoft and other vendors, identify root cause and document corrective and preventive actions. Develop and maintain PowerShell and Microsoft Graph automation for repeatable engineering, administration, reporting, validation, monitoring and support activities. Design and maintain least-privilege administrative access using Microsoft 365 RBAC and enterprise identity-governance processes. Create and maintain solution designs, technical standards, implementation plans, test plans, operational procedures, recovery procedures, support documentation and user guidance. Prepare for and participate in audit activities, provide technical evidence and remediate control or documentation gaps. Monitor Microsoft product changes and roadmap announcements, assess service impact and convert relevant changes into planned engineering or operational work. Identify opportunities to reduce technical debt, simplify the service estate and improve operational processes through standardisation and automation. Provide knowledge transfer and technical guidance to engineering and operations teams, and support controlled handover of new capabilities into production. What we valueThese skills will help you succeed in this role Deep hands-on engineering and support experience with Exchange Online and Exchange hybrid or on-premises environments, including transport, connectors, mail routing, certificates, TLS, RBAC, mailbox management and troubleshooting. Strong experience with Microsoft Defender for Office 365 and enterprise email security controls, including threat policies, investigation, quarantine and mail-flow protection. Experience designing and supporting integrations between Exchange, Microsoft Purview, Microsoft Defender for Office 365 and third-party email security, DLP, archive or encryption platforms. Strong PowerShell skills for Exchange Online and Microsoft 365 engineering and administration; experience with Microsoft Graph, APIs, Power Automate or Python is beneficial. Practical knowledge of Microsoft Entra ID, authentication, Conditional Access, enterprise applications, service principals, privileged access and least-privilege design. Working knowledge of Microsoft Purview capabilities relevant to email, including Message Encryption, sensitivity labels, DLP, retention, eDiscovery and Audit. Experience with Microsoft 365 security and compliance controls in a large, regulated enterprise, including audit evidence, control testing, change management and risk remediation. Ability to troubleshoot complex end-to-end issues across cloud services, hybrid infrastructure, identity, networking, DNS, certificates and third-party integrations. Experience with service monitoring, incident management, problem management, change implementation, testing and operational readiness. Ability to work independently, lead technical workstreams and collaborate effectively with engineers, operations teams, control partners and vendors. Detailed and organised critical thinker with strong problem-solving skills and a focus on service resilience, security and supportability. Effective verbal and written communication skills, including the ability to explain technical risks, options and recommendations clearly. Education and Preferred QualificationsA degree in Computer Science (or a related discipline) or 5 or more years of equivalent work experience.Experience with Exchange Online, Microsoft Defender and Microsoft PurviewSalary Range: $90,000 - $157,500 AnnualThe range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.For a full overview, visit .About State StreetAcross the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.Discover more information on jobs at StateStreet.com/careersRead our CEO StatementJob Application Disclosure:It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.SummaryLocation: Quincy, MassachusettsType: Full time