Email & Domain Security Administrator

Position Overview

We are seeking a seasoned Email & Domain Security Administrator to join our team in Dubai, United Arab Emirates. Our company operates within the mining and international minerals trading sectors. The appointed individual will be tasked with securing and managing our corporate email infrastructure and domain environment to defend against cyber threats such as phishing, Business Email Compromise (BEC), spoofing, and unauthorized access, ensuring continuous secure email operations.

Core Duties

• Administer Microsoft 365 and/or GoDaddy email services.
• Oversee corporate domains alongside DNS records associated with email.
• Set up and maintain SPF, DKIM, and DMARC to prevent spoofing and impersonation.
• Handle user accounts, permissions, security groups, and Multi-Factor Authentication (MFA).
• Track login activities, audit logs, and security alerts, responding to incidents promptly.
• Identify and counter phishing, spoofing, BEC, and social engineering threats.
• Verify any requested changes in bank account or payment details with rigorous scrutiny.
• Address issues related to email delivery, authentication, and DNS.
• Enhance email deliverability and preserve sender reputation.
• Manage shared mailboxes, distribution lists, aliases, and email policies.
• Administer domain transfers, renewals, and DNS configurations.
• Renew and manage SSL/TLS certificates.
• Implement backup and disaster recovery plans for email systems.
• Monitor domain and IP reputation to avoid blacklistings.
• Use Microsoft 365 Admin Center and Exchange Admin Center for administration.
• Adopt email security best practices and uplift the organization's overall security posture.
• Offer technical support concerning email systems and security.
• Ensure strict confidentiality of all company data.

Qualifications and Skills

• At least 3 years of experience managing corporate email and domain security.
• Practical expertise with Microsoft 365 and/or GoDaddy management.
• Proven capability handling multiple corporate domains and business email accounts.
• Strong knowledge of SPF, DKIM, DMARC, and DNS records.
• Familiarity with Exchange Online and Microsoft Entra ID (Azure Active Directory).
• Experienced with MFA implementation and user access controls.
• Competence in SSL/TLS certificate handling, email backup, and disaster recovery processes.
• In-depth understanding of phishing protection, spoofing, social engineering, and BEC mitigation.
• Excellent problem-solving and analytical abilities.
• Fluency in English and Arabic, both spoken and written.
• High standards of integrity, confidentiality, and meticulous attention to detail.

Mandatory Experience

• Demonstrated track record safeguarding organizations from email-based cyber threats like customer or supplier impersonation, fake bank detail requests, spear-phishing, domain spoofing, and email fraud relating to contracts or financial dealings.
• Hands-on experience configuring and managing SPF, DKIM, DMARC, DNS Records, Microsoft 365 Security, and Exchange Online.

Technical Assessment

Candidates progressing to the next stage must undertake a practical assessment involving:

• Analysis and rationale of authentic and fraudulent emails.
• Setup, troubleshooting, and validation of SPF, DKIM, and DMARC.
• Review of DNS configurations and email authentication issues.
• Microsoft 365 or GoDaddy administration tasks including user and security management.
• Recognizing security weaknesses and recommending countermeasures.
• Scenarios dealing with phishing, BEC, and domain spoofing.

Compensation and Opportunities

• Competitive remuneration aligned with experience and qualifications.
• Chance to contribute to an expanding international mining and trading entity.
• A professional and secure workplace fostering collaboration.
• Opportunities for long-term advancement.
• A pivotal role in protecting critical digital assets and cybersecurity.

Application Details

Please forward your CV in English, paired with a cover letter underscoring expertise in Microsoft 365, GoDaddy, Domain Administration, DNS Management, and Email Security. Indicate "Email & Domain Security Administrator" in your application subject line. Only shortlisted candidates will be contacted and must clear both a technical interview and practical test for employment consideration.