Hiring For AD & Email Support Engineer|| Kolkata location

Role & responsibilities

The AD & Email Support Engineer will be responsible for advanced administration, troubleshooting, optimization, and security of Active Directory and enterprise email platforms. This role acts as a Subject Matter Expert (SME) for identity, authentication, and messaging services, ensuring high availability, security compliance, and support for business-critical operations and audits.

Core Responsibilities

1. Advanced Active Directory (AD) Management

• Deep administration of Active Directory Domain Services (AD DS) including Forests, Domains, Trusts, and FSMO roles
• Design, implement, and optimize OU structures, delegation models, and access controls
• Advanced Group Policy (GPO) design, inheritance analysis, troubleshooting, and performance optimization
• Diagnose and resolve AD replication issues, including SYSVOL, DNS dependencies, and Sites & Services topology
• Troubleshoot complex authentication and authorization issues (Kerberos, NTLM, LDAP)
• Conduct AD health checks, security baselining, and remediation activities
• Manage Privileged Access, service accounts, and Role-Based Access Control (RBAC)
• Perform Domain Controller hardening, patching, upgrades, and lifecycle management

2. Enterprise Email & Messaging Expertise

• Administration of Microsoft Exchange (On-Premises / Hybrid) and Microsoft 365
• Deep troubleshooting of mail flow, connectors, and routing
• Configuration and validation of MX, SPF, DKIM, and DMARC
• Management of shared mailboxes, resource mailboxes, transport rules, and retention policies
• Handling email security incidents, including phishing, spoofing, and malware outbreaks
• Execution of mailbox migrations, hybrid configurations, and tenant-to-tenant migrations
• Configuration and troubleshooting of Outlook, Autodiscover, and mobile device access
• Ensure compliance with email retention, eDiscovery, legal hold, and audit requirements

Educational Qualifications & Certifications

• Bachelors degree in Computer Science, Information Technology, Engineering, or equivalent practical experience
• Mandatory Microsoft Certifications:
• MS-700 (Managing Microsoft Teams)
• MS-721 (Collaboration Communications Systems Engineer)
• MS-102 (Microsoft 365 Administrator)
• Preferred certifications:
• Microsoft Certified: Windows Server / Identity
• Microsoft 365 / Exchange certifications
• ITIL Foundation
• ISO 27001 / ISMS awareness
• Hands-on experience with Email Gateway Security, including:
• Trend Micro Advanced Security
• Trend Micro Vision One
• Trend Micro Cloud & Email Collaboration Protection
• Supporting infrastructure knowledge: Hyper-V, DNS, DHCP

Core Technical Skills (Mandatory)

Active Directory & Identity

• Expert-level knowledge of Active Directory Domain Services (AD DS)
• Strong understanding of Forest, Domain, Trust relationships, and FSMO roles
• Advanced expertise in Group Policy design, filtering, inheritance, and troubleshooting
• In-depth knowledge of DNS integration, AD replication, SYSVOL, and Sites & Services
• Hands-on troubleshooting of Kerberos, NTLM, and LDAP authentication issues
• Experience with Privileged Access Management, service accounts, RBAC, and least-privilege models

Email & Messaging Systems

• Advanced administration of Microsoft Exchange (On-Prem / Hybrid) and Microsoft 365
• Strong understanding of mail flow architecture, connectors, and transport rules
• Expertise in SPF, DKIM, DMARC, MX records, and email security controls
• Hands-on experience with mailbox migrations, hybrid environments, and coexistence
• Advanced troubleshooting of Outlook, Autodiscover, mobile email, and delivery issues
• Proven experience handling phishing, spoofing, and malware incidents

Security & Compliance

• Practical knowledge of identity security controls, including MFA and Conditional Access
• Experience aligning AD and email configurations with ISO 27001 / ISMS controls
• Understanding of audit evidence collection, access reviews, and compliance reporting
• Familiarity with security incident response related to identity and messaging platforms

Automation & Scripting

• Intermediate to advanced PowerShell scripting for:
• User provisioning and de-provisioning
• Bulk mailbox and access management
• Reporting and compliance validation
• Ability to automate repetitive tasks to improve operational efficiency and accuracy

Supporting Technical Knowledge

• Strong fundamentals of Windows Server (2016 / 2019 / 2022 / 2025)
• Working knowledge of TCP/IP, DNS, SMTP, HTTPS
• Experience with ITSM / ticketing tools (ServiceNow, Fresh service, etc.)
• Knowledge of Cloud Email and Collaboration Protection

Understanding of backup, restore, and disaster recovery for AD and email systems

Preferred candidate profile

• Excellent troubleshooting and analytical abilities
• Ability to work independently and in cross-functional teams
• Strong documentation skills, including SOPs and technical runbooks
• Clear communication with both technical and non-technical stakeholders
• Ability to handle high-severity incidents, on-call duties, and critical outages calmly