Responsible for engineering and managing Email & Messaging platforms focusing on Microsoft Exchange and security. This role designs, implements, and improves enterprise mail flow, security, and compliance measures in collaboration with cross-functional teams.
JOB SUMMARY
Functions as the engineer for Email & Messaging platforms, with primary accountability for Microsoft Exchange, Microsoft Exchange Online, Exchange Online Protection / Microsoft Defender for Office 365, Cisco Secure Email (IronPort/ESA or CES), secure SMTP relay, and hybrid Exchange services. The ideal candidate is a hands-on engineer with excellent communication skills who can design, secure, operate, and continuously improve enterprise mail flow at global scale. This role resolves complex messaging issues, designs and implements security and authentication controls (SPF/DKIM/DMARC), and partners closely with Information Security and Identity teams to protect users against phishing, BEC, malware, and data loss. The engineer contributes to research, analysis, design, implementation, and sustainment of resilient, auditable, and compliant messaging services that meet current and future business and security requirements.
Required Education & Experience:
- Undergraduate degree in an engineering or computer science discipline and/or equivalent experience/certification
- 5+ years progressive experience in IT engineering, including 2-4+ years focused on enterprise email/messaging.
- 2+ years engineering Exchange Online and EOP / Microsoft Defender for Office 365 (policy design, Safe Links/Attachments, Threat Explorer, AIR, quarantine workflows).
- 2+ years administering Cisco Secure Email (IronPort/ESA or CES): listeners, SMTP Auth, TLS, content filters, DLP, quarantine/SMAs, TAC engagement.
- Proven ability integrating with Microsoft 365 security tooling, as well as other security tooling such as Splunk, CrowdStrike, Abnormal Security, etc.
- Messaging security standards expertise with proficiency of new security technologies related to messaging, such as ICES
- Demonstrated expertise in mail flow: connectors, accepted/remote domains, transport rules, message tracing, header analysis, and hybrid routing in a large & complex messaging environment.
- Practical mastery of email authentication (SPF/DKIM/DMARC) design, rollout, and enforcement with reporting/monitoring.
- Advanced PowerShell for Exchange Online (EXO v3), scripting for policy/config automation; familiarity with Graph API helpful.
- Experience operating hybrid Exchange (HCW, connectors, auth, coexistence) and modernizing legacy protocols.
- 2+ years working in Agile delivery (scrum/kanban), with proven user-centered design mindset applied to service hardening and incident response.
- 2+ years integrating on-prem and cloud services in a large, global enterprise.
Other Attributes and Preferred Qualifications/Experience:
- Excellent written and verbal communication; strong attention to detail and ability to drive outcomes across competing priorities.
- Demonstrated ability to work independently and in cross-functional initiatives (Security, Identity, Networking, Legal/Compliance).
- Experience researching and adopting emerging email security capabilities and standards (e.g., MTA-STS/TLS-RPT, BIMI).
- Seasoned experience with directory/identity (Microsoft Active Directory/Entra ID), modern auth, Conditional Access; Ping/other IdPs a plus.
- Certifications such as Microsoft 365 Certified: Messaging Administrator Associate; Cisco Secure Email training/certifications preferred.
- Strong understanding of governance and security policy alignment (e.g., MIP-29 Global Information Security Policy).
- Experience integrating messaging telemetry with SIEM (e.g., Splunk) and operational dashboards.
Core Work Activities
- Own Exchange Online/EOP/MDO configuration: design, implement, and continuously improve anti-spam/anti-phish/anti-malware policies, Safe Links/Attachments, quarantine workflows, and Automated Investigation & Response (AIR); partner with SOC for incident handling.
- Operate Cisco Secure Email (IronPort/ESA or CES) where in use: listeners, routing, SMTPAuth, TLS, content filters, outbreak/AV verdicts, SMAs/reporting, and coordinate with Cisco TAC as required.
- Lead mail-flow modernization: design and execute changes required to transition, optimize, and sustain routing through EOP/Defender; maintain necessary interoperability and fallback paths.
- Engineer secure SMTP relay: implement authenticated relay patterns for applications/services, onboard senders, define migration waves, and publish requirements; partner with App/Network owners for firewall and testing.
- Implement & enforce email authentication: deploy SPF/DKIM/DMARC across domains, move to enforcement (p=quarantine/reject) with measurement and false-positive remediation; manage reporting and posture dashboards.
- Hybrid Exchange operations: maintain HCW, connectors, and coexistence; plan deprecation of legacy features in line with vendor guidance.
- Telemetry & logging: integrate Defender/EOP/IronPort signals with SIEM; define alerting, runbooks, and SLOs for detection and response; support IPT/controls outcomes for 'Improve Email Logging & Monitoring.'
- Compliance & eDiscovery: partner with Security/Legal to apply retention, litigation hold, eDiscovery workflows, and DLP/policy hygiene in Purview for email workloads (as needed).
- Documentation & enablement: keep runbooks current (Exchange/Defender/IronPort), publish KBs, and educate tech and field teams on new features and policy changes.
- Leads in the evaluation, investigation, and testing of new technologies with other teams
- Acts as a Technical Subject Matter Expert for Messaging products and services
- Participate in security incident response activities, as needed for Messaging products
Managing Projects and Priorities
- Thinks creatively and practically to design and execute messaging roadmaps and modernization plans; manages risks, dependencies, and cutovers.
- Generates timely results (designs, RFCs, reports, dashboards) and holds stakeholders to delivery commitments.
- Plans, implements, and evaluates the quality and resiliency of operations with a focus on measurable service outcomes.
Delivering on the Needs of Key Stakeholders
- Balances security, reliability, and user experience; communicates decisions and trade-offs in clear, persuasive terms.
- Demonstrates strong business acumen; aligns changes to measurable outcomes (reduced phishing risk, improved deliverability, lower toil).
- Supports team/portfolio goals and budget adherence through automation and policy standardization.
Providing Technical Support and Consultation
- Advises on best practices for mail-flow, authentication, and threat protection; anticipates and resolves complex issues.
- Applies deep knowledge of Exchange Online, EOP/MDO, Cisco Secure Email, and identity to meet business goals and security requirements.
- Keeps current with platform roadmaps and standards; evaluates new capabilities and drives adoption when beneficial.
- Performs other reasonable duties as required for the position.
At Marriott International, we are dedicated to being an equal opportunity employer, welcoming all and providing access to opportunity. We actively foster an environment where the unique backgrounds of our associates are valued and celebrated. Our greatest strength lies in the rich blend of culture, talent, and experiences of our associates. We are committed to non-discrimination on any protected basis, including disability, veteran status, or other basis protected by applicable law.
About Us All positions offer a 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others. Click here to learn more.
Full-time positions also offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave and educational assistance.
Washington Applicants Only: Employees will accrue paid sick leave, 0.077 PTO balance for every hour worked and be eligible to receive a minimum of 9 holidays annually.
Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions.
About the TeamMarriott International is the world’s largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed. Be where you can do your best work, begin your purpose, belong to an amazing global team, and become the best version of you.Top Skills
Cisco Secure Email
Crowdstrike
Exchange Online Protection
Graph Api
Microsoft Defender For Office 365
Microsoft Exchange
Microsoft Exchange Online
Powershell
Splunk
Similar Jobs
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Lead design, configuration, and deployment of Workday Talent and Compensation processes (Calibration, Succession, Compensation data loads, M&A integrations). Serve as technical lead for high-complexity Workday projects, mentor juniors, manage release cycles, and partner with global HR and compensation teams to support global expansion and optimization.
Top Skills:
Core CompensationDocusignEibExcelHcmPaveTalent & PerformanceWorkdayWorkday Extend
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
The role involves developing and deploying network security measures, managing DDoS defenses, and improving security practices across the organization's hybrid cloud network.
Top Skills:
AlgosecAnsibleAWSBgpDdosFiremonGCPIpsecOspfSdnTcp/IpTufin
Artificial Intelligence • Automotive • Greentech • Information Technology • Machine Learning • Software • Cybersecurity
The Application Modernization Architect will guide clients on cloud-native development and software modernization, creating technical roadmaps and architectures, and engaging in hands-on coding as needed.
Top Skills:
AWSAzureDockerGCPKubernetesOpenshift
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
