Lead Systems Administrator

Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own.

We have a flexible work environment, and fluid career paths.

We not only encourage but celebrate internal mobility.

We also recognize the importance of purpose, well‑being, and work‑life balance.

Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them.

Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself.

Applicants must be authorized to work for any employer in the U. S. We are unable to sponsor or take over sponsorship of an employment visa at this time, including CPT/OPT.

The Lead Systems Administrator will serve as the technical lead for the enterprise Microsoft 365 Messaging platform, Exchange Online, and enterprise email security services as part of the Empower Technology Infrastructure team.

This role is responsible for the architecture, administration, governance, security, and operational excellence of the organization’s messaging infrastructure, with a strong focus on Microsoft 365, Exchange Online, Proofpoint Email Protection, advanced email routing, and secure mail flow.

The Lead Systems Administrator will lead the design, implementation, monitoring, and continuous improvement of enterprise messaging and email security solutions to support high availability, compliance, resiliency, and protection against phishing, malware, business email compromise, and other emerging threats.

What you will do

• Serve as the technical lead and subject matter expert for Microsoft 365 Messaging technologies, including Exchange Online and related Microsoft services.
• Lead administration and engineering of Microsoft Exchange Online, Microsoft 365 messaging services, and hybrid mail environments.
• Design, implement, and maintain enterprise email security solutions using Proofpoint Email Protection, Targeted Attack Protection, Email Fraud Defense, and related Proofpoint technologies.
• Design and support complex enterprise mail flow and advanced email routing, including SMTP routing, secure connectors, hybrid Exchange routing, third‑party integrations, domain management, transport rules, and mail relay services.
• Manage email authentication technologies, including SPF, DKIM, and DMARC, to improve email security and reduce spoofing.
• Design and maintain policies supporting phishing protection, malware prevention, data loss prevention, encryption, and email compliance.
• Partner with Cybersecurity teams to investigate messaging threats, email incidents, and security events.
• Develop standards, operational procedures, and self‑service documentation for messaging technologies.
• Automate administrative functions using Power Shell, Microsoft Graph API, Azure Automation, or related scripting technologies.
• Monitor messaging health, service availability, mail flow, queue performance, routing efficiency, and security metrics.
• Lead operational support for Microsoft 365 messaging platforms while participating in incident response and problem management activities.
• Collaborate with Identity and Access Management teams on authentication, Conditional Access, and secure administrative access.
• Work closely with Microsoft, Proofpoint, and other technology vendors to resolve complex issues and implement strategic improvements.
• Evaluate emerging Microsoft 365 and messaging technologies and provide architectural recommendations.
• Provide technical leadership, mentoring, and knowledge transfer to other infrastructure engineers and operational support teams.
• Partner with Cybersecurity, Infrastructure, Identity, Networking, Compliance, and Application teams to deliver secure, scalable, and highly available messaging services while driving automation, operational excellence, and strategic modernization initiatives.

What you will bring

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent work experience.

What will set you apart

• Microsoft and/or Proofpoint certifications.
• Expert knowledge of Microsoft 365 administration with emphasis on Exchange Online.
• Extensive experience supporting enterprise messaging environments serving large organizations.
• Strong experience with Proofpoint Email Protection, Targeted Attack Protection, Email Fraud Defense, and Proofpoint administration.
• Deep understanding of SMTP, DNS, MX records, SPF, DKIM, DMARC, TLS, and secure email routing.
• Experience with Microsoft Defender for Office 365, Microsoft Purview, and Microsoft Entra ID.
• Knowledge of Microsoft Exchange Hybrid deployments and migration strategies.
• Experience supporting enterprise email compliance, retention, e Discovery, and regulatory requirements.
• Experience integrating messaging platforms with identity providers and security technologies.
• Strong Power Shell scripting and automation experience.
• Familiarity with Microsoft Graph API and Microsoft 365 automation.
• Knowledge of networking concepts, including DNS, load balancing, firewalls, certificates, and network security.
• Excellent troubleshooting, root cause analysis, and incident management skills.
• Strong documentation, architecture, and communication skills.
• Ability to adapt to an evolving cloud‑first technology environment.

This job operates in a professional office environment.

This job description is not intended to be an exhaustive list of all duties, responsibilities and qualifications of the job.

The employer has the right to revise this job description at any time.

You will be evaluated in part based on your performance of the responsibilities and/or tasks listed in this job description.

You may be required to perform other duties that are not included on this job description.

The job description is not a contract for employment, and either you or the employer may terminate employment at any time, for any reason, as per terms and conditions of your employment contract.

What we offer you

We offer an array of diverse and inclusive benefits regardless of where you are in your career.

We believe that providing our employees with the means to lead healthy balanced lives results in the best possible work performance.

• Medical, dental, vision and life insurance
• Retirement savings – 401(k) plan with generous company matching contributions (up to 6%), financial advisory services, potential company discretionary contribution, and a broad investment lineup
• Tuition reimbursement up to $5,250/year
• Business‑casual environment that includes the option to wear jeans
• Generous paid time off upon hire – including a paid time off program plus ten paid company holidays and three floating holidays each calendar year
• Paid volunteer time — 16 hours per calendar year
• Leave of absence programs – including paid parental leave, paid short‑ and long‑term disability, and Family and Medical Leave (FMLA)
• Business Resource Groups (BRGs) – BRGs facilitate inclusion and collaboration across our business internally and throughout the communities where we live, work and play.

BRGs are open to all.

• Base Salary Range
• $105,700.00 - $149,275.00

The salary range above shows the typical minimum to maximum base salary range for this position in the location listed.

Non‑sales positions have the opportunity to participate in a bonus program.

Sales positions are eligible for sales incentives, and in some instances a bonus plan, whereby total compensation may far exceed base salary depending on individual performance.

Actual compensation offered may vary from posted hiring range based upon geographic location, work experience, education, licensure requirements and/or skill level and will be finalized at the time of offer.

Equal opportunity employer and drug‑free workplace.

We are an equal opportunity employer with a commitment to diversity.

All individuals, regardless of personal characteristics, are encouraged to apply.

All qualified applicants will receive consideration for employment without regard to age (40 and over), race, color, national origin, ancestry, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, religion, physical or mental disability, military or veteran status, genetic information, or any other status protected by applicable state or local law.

For remote and hybrid positions you will be required to provide reliable high‑speed internet with a wired connection as well as a place in your home to work with limited disruption.

You must have reliable connectivity from an internet service provider that is fiber, cable or DSL internet.

Other necessary computer equipment, will be provided.

You may be required to work in the office if you do not have an adequate home work environment and the required internet connection.

#J-18808-Ljbffr