Summary
Position Summary
Assistant Manager (L4) Active Directory and Email Engineer OverviewThe Assistant Manager Systems Administrator will serve as a subject matter expert for mission-critical infrastructure services, specializing in Active Directory, Exchange Online, DNS, and Email Gateway management. This role centers on administering access controls, maintaining secure and efficient messaging environments, and ensuring the availability and integrity of core directory and network services. The ideal candidate thrives in a fast-paced, compliance-driven environment and enjoys both operational execution and process optimization.Key ResponsibilitiesActive Directory Administration
- Manage and maintain on-premises and cloud-synced Active Directory environments, supporting user/group provisioning, OU structuring, and Group Policy Objects (GPOs) design.
- Conduct regular AD health checks, troubleshoot replication and authentication issues, and lead domain upgrade/migration projects.
- Implement and automate security best practices, password policies, and account lifecycle workflows (joiners, movers, leavers) using PowerShell and native tools.
- Perform AD object management, rights delegation, and audit logging for compliance reporting.
- Oversee domain controller (DC) maintenance, recoveries, and GPO optimization.
Exchange On-Prem & Hybrid Administration
- Administer and provide Tier-2/3 troubleshooting for Exchange Online mailboxes, distribution groups, shared mailboxes, permissions, and mail flow rules.
- Optimize mailbox provisioning, retention policies, and data loss prevention (DLP) configurations.
- Integrate Exchange Online with security controls (MFA, mail flow rules, anti-phishing, anti-spam), and collaborate on hybrid Exchange environments when needed.
- Support email lifecycle processes, resolve delivery issues, and enhance end-user experience through advanced messaging configuration.
Email Gateway Administration
- Administer Cisco IronPort Email Security Appliances (ESA) or Cloud Email Security, configuring inbound/outbound mail policies, DLP, anti-malware, and encryption rules.
- Monitor, analyze, and act on spam quarantine, attachment/URL filtering, and mail tracking/vulnerability alerts across the user base.
- Lead updates and integration of Cisco IronPort with existing directory and messaging environments.
- Troubleshoot mail delivery problems, quarantine releases, and escalate critical security events in collaboration with InfoSec teams.
- Generate regular analytic and compliance reports related to gateway traffic, threats, and filtering metrics.
DNS Administration
- Administer corporate DNS infrastructure to ensure resilient, secure, and high-performance name resolution services.
- Configure and maintain DNS zones, records, and delegation for internal/external systems.
- Conduct regular audits for stale/incorrect entries, enforce DNS security (DNSSEC/ACLs), and proactively monitor for performance or security anomalies.
- Develop and maintain DNS disaster recovery and failover procedures.
General & Collaborative Responsibilities
- Maintain accurate documentation (runbooks, process maps, knowledge articles) for all supported platforms.
- Participate in cross-team projects involving messaging, security, or identity infrastructure.
- Provide remote/onsite support, participate in an on-call rotation, and deliver timely incident resolution in line with SLAs.
- Engage in audit/compliance reviews and actively recommend improvements for security, resilience, and operational efficiency.
Required Skills & Experience
- Bachelor's degree in computer science, Information Technology, or related field (or equivalent practical experience).
- 57+ years hands-on experience in IT systems administration, managing authentication and enterprise Active Directory for organizations of at least 10,000 users.
- Demonstrated operational proficiency using native Microsoft administration tools and snap-ins for AD.
- Practical experience building, maintaining, and troubleshooting AD Domain Controllers, GPOs, and PKI infrastructures.
- Proven scripting ability (primarily PowerShell) for automation and reporting in complex environments.
- Advanced troubleshooting and support skills for Microsoft Outlook, Exchange 2019, and Exchange Online/O365.
- Strong practical background with DNS architecture, design, and troubleshooting within secure, distributed environments.
- Demonstrated expertise with Microsoft Azure AD, O365 tenant administration, and hybrid identity solutions.
- Experience administering email security gateways such as Cisco IronPort or similar.
- Advanced incident management and resolution skills via ticket queue systems; able to coordinate multiple projects and priorities effectively.
- Excellent written and verbal communication skills.
- High levels of personal ownership, motivation, and a proactive approach to continuous improvement.
- Strong adherence to operational rigor, compliance, and documentation standards.
- Eagerness to learn and passion for IT, with the ability to thrive under pressure and multi-task in a dynamic, enterprise environment.
About Deloitte
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee (DTTL), its network of member firms, and their related entities. DTTL and each of its member firms are legally separate and independent entities. DTTL (also referred to as Deloitte Global) does not provide services to clients. In the United States, Deloitte refers to one or more of the US member firms of DTTL, their related entities that operate using the Deloitte name in the United States and their respective affiliates. Certain services may not be available to attest clients under the rules and regulations of public accounting. Please see www.deloitte.com/about to learn more about our global network of member firms.Copyright 2025 Deloitte Development LLC. All rights reserved.
Our purpose
Deloitte's purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.
Our people and culture
Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our clients most complex challenges. This makes Deloitte one of the most rewarding places to work.
Professional development
At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .
Benefits To Help You Thrive
At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financiallyand live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.
Recruiting tips
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.Requisition code: 318988
