Quick Overview
Seniority
Mid Senior
Work mode
Remote
Location
Almont, CO, United States
Posted
Yesterday
MFACompliancePowerShell
Job Description
Job Description
Title: MS 365 / Entra Architect
Location: Remote
Ekman Associates is a management consulting firm that specializes in developing business, digital, and technology strategy, delivering solutions, and addressing human resource demands.
Summary:
Seeking an experienced Microsoft 365 / Microsoft Entra ID SME for a short-term engagement to design, configure, and implement a secure Microsoft 365 cross-tenant collaboration architecture across three independent business-unit environments. This is a "hands-on” role & engagement.
Key Experience:
Title: MS 365 / Entra Architect
Location: Remote
Ekman Associates is a management consulting firm that specializes in developing business, digital, and technology strategy, delivering solutions, and addressing human resource demands.
Summary:
Seeking an experienced Microsoft 365 / Microsoft Entra ID SME for a short-term engagement to design, configure, and implement a secure Microsoft 365 cross-tenant collaboration architecture across three independent business-unit environments. This is a "hands-on” role & engagement.
Key Experience:
- M365 Commercial + GCC
- Entra cross-tenant/MTO
- CMMCC
- Work directly with IT leadership & individual business unit IT site administrators & vendor-partners to establish a practical, secure, and supportable architecture enabling cross-company calendar free/busy, identity collaboration, and controlled SharePoint/OneDrive file and folder sharing, while maintaining appropriate CMMC and data-segregation requirements.
- Assess the current Microsoft 365, Entra ID, Exchange Online, SharePoint, and security configurations across the three production tenants.
- Develop the target-state architecture for cross-tenant collaboration.
- Evaluate and, where appropriate, implement a Microsoft Entra Multitenant Organization (MTO) and/or cross-tenant access/B2B architecture.
- Configure Exchange Online Organization Relationships to provide controlled cross-company calendar free/busy visibility.
- Configure Entra cross-tenant synchronization/B2B collaboration for appropriately selected users and groups.
- Design and implement controlled SharePoint Online/OneDrive cross-tenant file and folder collaboration.
- Establish appropriate Conditional Access, MFA, guest/external-user, access-control, and least-privilege policies.
- Establish security groups and governance mechanisms for cross-company collaboration.
- Ensure the architecture appropriately separates general corporate/non-CUI collaboration from GCC High CUI enclave.
- Review the implications of the newly acquired domain and recommend an appropriate corporate identity/namespace strategy.
- Assess the deprecated AdTech Commercial tenant for any remaining dependencies and recommend/assist with retirement where appropriate.
- Document the resulting architecture, configuration, security controls, administration procedures, and ongoing support requirements.
- Provide knowledge transfer to staff and leave the environment fully supportable after completion.
- Microsoft 365 / Office 365 administration
- Microsoft Entra ID experience
- Entra B2B and cross-tenant access
- Entra cross-tenant synchronization
- Microsoft Entra Multitenant Organizations
- Exchange Online and Organization Relationships
- SharePoint Online and OneDrive
- Microsoft Teams cross-tenant collaboration
- Conditional Access and MFA
- Microsoft 365 security and identity governance
- Microsoft 365 tenant-to-tenant architecture
- Microsoft Graph / PowerShell administration and automation
- Microsoft 365 Commercial and GCC environments
- Compliance / Security Experience
- Experience working with regulated environments is strongly preferred, particularly:
- CMMC
- NIST 800-171
- CUI data segregation
- Microsoft 365 GCC / GCC High
- ITAR/EAR environments
- Security boundary and data-flow considerations.
- The consultant must understand that we have a separate GCC High environment in a separate CUI enclave and is not to be incorporated into the general collaboration environment without specific architectural and compliance approval.
Similar jobs
- SI
CADD Support Consultant || Atlanta, GA - Hybrid || 12 months || F2F Interview
NewStellent IT LLC
Atlanta, GA🇺🇸On-site19 hours agoPythonServiceNowTalent Acquisition - BU
AWS Data & AI Tech Lead
NewBuaut
United States🇺🇸Hybrid19 hours agoFastAPIAPI GatewayAWS+9 - VS
Material Coordinator - Pataskala, OH - Onsite
NewVerito Solutions
Pataskala, OH🇺🇸On-site19 hours agoInventory ManagementProcurementScheduling - SB
Embedded Tester Danvers - MA - Massachusetts
NewSierra Business Solution LLC
Danvers, MA🇺🇸Hybrid19 hours agoPython - PR
Data Governance / Target Operating Model (TOM) Lead, New York, NY (Hybrid- 3 Days Onsite)
NewProhires
New York, NY🇺🇸Hybrid19 hours agoDerivativesInternal AuditUnity - ST
GitLab Administrator
NewSaim Technologies
Dallas, TX🇺🇸On-site19 hours agoAWSELKSAML+10