MS 365 / Entra Architect

Job Description

Title: MS 365 / Entra Architect
Location: Remote

Ekman Associates is a management consulting firm that specializes in developing business, digital, and technology strategy, delivering solutions, and addressing human resource demands.

Summary:

Seeking an experienced Microsoft 365 / Microsoft Entra ID SME to design, configure, and implement a secure Microsoft 365 cross-tenant collaboration architecture across three independent business-unit environments. This is a "hands-on” role & engagement.

Key Experience:

• M365 Commercial + GCC
• Entra cross-tenant/MTO
• CMMC/GCC

Responsibilities:

• Work directly with IT leadership & individual business unit IT site administrators & vendor-partners to establish a practical, secure, and supportable architecture enabling cross-company calendar free/busy, identity collaboration, and controlled SharePoint/OneDrive file and folder sharing, while maintaining appropriate CMMC and data-segregation requirements.
• Assess the current Microsoft 365, Entra ID, Exchange Online, SharePoint, and security configurations across the three production tenants.
• Develop the target-state architecture for cross-tenant collaboration.
• Evaluate and, where appropriate, implement a Microsoft Entra Multitenant Organization (MTO) and/or cross-tenant access/B2B architecture.
• Configure Exchange Online Organization Relationships to provide controlled cross-company calendar free/busy visibility.
• Configure Entra cross-tenant synchronization/B2B collaboration for appropriately selected users and groups.
• Design and implement controlled SharePoint Online/OneDrive cross-tenant file and folder collaboration.
• Establish appropriate Conditional Access, MFA, guest/external-user, access-control, and least-privilege policies.
• Establish security groups and governance mechanisms for cross-company collaboration.
• Ensure the architecture appropriately separates general corporate/non-CUI collaboration from GCC High CUI enclave.
• Review the implications of the newly acquired domain and recommend an appropriate corporate identity/namespace strategy.
• Assess the deprecated AdTech Commercial tenant for any remaining dependencies and recommend/assist with retirement where appropriate.
• Document the resulting architecture, configuration, security controls, administration procedures, and ongoing support requirements.
• Provide knowledge transfer to staff and leave the environment fully supportable after completion.

Qualifications:

• Microsoft 365 / Office 365 administration
• Microsoft Entra ID experience
• Entra B2B and cross-tenant access
• Entra cross-tenant synchronization
• Microsoft Entra Multitenant Organizations
• Exchange Online and Organization Relationships
• SharePoint Online and OneDrive
• Microsoft Teams cross-tenant collaboration
• Conditional Access and MFA
• Microsoft 365 security and identity governance
• Microsoft 365 tenant-to-tenant architecture
• Microsoft Graph / PowerShell administration and automation
• Microsoft 365 Commercial and GCC environments
• Compliance / Security Experience
• Experience working with regulated environments is strongly preferred, particularly:
  • CMMC
  • NIST 800-171
  • CUI data segregation
  • Microsoft 365 GCC / GCC High
  • ITAR/EAR environments
  • Security boundary and data-flow considerations.
• Must understand that we have a separate GCC High environment in a separate CUI enclave and is not to be incorporated into the general collaboration environment without specific architectural and compliance approval.

Qualified Candidates Only: If you wish to learn more about this opportunity and additional qualifications/responsibilities, please submit your resume. To learn more about Ekman Associates, Inc. please visit our website at www.ekmanassociates.com.