Haystack
← Back to Jobs
Remote
Other
EA

MS 365 / Entra Architect

Ekman Associates, Inc.Almont, CO🇺🇸United StatesPosted Sep 1, 2026

Why This Role Stands Out

This remote role offers a significant opportunity to design and implement a critical Microsoft 365 and Entra ID cross-tenant collaboration architecture, allowing you to leverage your expertise in a high-impact project. You'll thrive here if you are a hands-on architect with deep experience in M365, Entra, and cross-tenant solutions, eager to contribute to a leading management consulting firm. Apply now to shape innovative technology strategies and advance your career.

Quick Overview

Seniority
Mid Senior
Work mode
Remote
Location
Almont, CO, United States
Posted
3 weeks ago
MFAComplianceHTTPPowerShell

Job Description

Job Description
Title: MS 365 / Entra Architect
Location: Remote
Ekman Associates is a management consulting firm that specializes in developing business, digital, and technology strategy, delivering solutions, and addressing human resource demands.
Summary:
Seeking an experienced Microsoft 365 / Microsoft Entra ID SME to design, configure, and implement a secure Microsoft 365 cross-tenant collaboration architecture across three independent business-unit environments. This is a "hands-on” role & engagement.
Key Experience:
  • M365 Commercial + GCC
  • Entra cross-tenant/MTO
  • CMMC/GCC
Responsibilities:
  • Work directly with IT leadership & individual business unit IT site administrators & vendor-partners to establish a practical, secure, and supportable architecture enabling cross-company calendar free/busy, identity collaboration, and controlled SharePoint/OneDrive file and folder sharing, while maintaining appropriate CMMC and data-segregation requirements.
  • Assess the current Microsoft 365, Entra ID, Exchange Online, SharePoint, and security configurations across the three production tenants.
  • Develop the target-state architecture for cross-tenant collaboration.
  • Evaluate and, where appropriate, implement a Microsoft Entra Multitenant Organization (MTO) and/or cross-tenant access/B2B architecture.
  • Configure Exchange Online Organization Relationships to provide controlled cross-company calendar free/busy visibility.
  • Configure Entra cross-tenant synchronization/B2B collaboration for appropriately selected users and groups.
  • Design and implement controlled SharePoint Online/OneDrive cross-tenant file and folder collaboration.
  • Establish appropriate Conditional Access, MFA, guest/external-user, access-control, and least-privilege policies.
  • Establish security groups and governance mechanisms for cross-company collaboration.
  • Ensure the architecture appropriately separates general corporate/non-CUI collaboration from GCC High CUI enclave.
  • Review the implications of the newly acquired domain and recommend an appropriate corporate identity/namespace strategy.
  • Assess the deprecated AdTech Commercial tenant for any remaining dependencies and recommend/assist with retirement where appropriate.
  • Document the resulting architecture, configuration, security controls, administration procedures, and ongoing support requirements.
  • Provide knowledge transfer to staff and leave the environment fully supportable after completion.
Qualifications:
  • Microsoft 365 / Office 365 administration
  • Microsoft Entra ID experience
  • Entra B2B and cross-tenant access
  • Entra cross-tenant synchronization
  • Microsoft Entra Multitenant Organizations
  • Exchange Online and Organization Relationships
  • SharePoint Online and OneDrive
  • Microsoft Teams cross-tenant collaboration
  • Conditional Access and MFA
  • Microsoft 365 security and identity governance
  • Microsoft 365 tenant-to-tenant architecture
  • Microsoft Graph / PowerShell administration and automation
  • Microsoft 365 Commercial and GCC environments
  • Compliance / Security Experience
  • Experience working with regulated environments is strongly preferred, particularly:
    • CMMC
    • NIST 800-171
    • CUI data segregation
    • Microsoft 365 GCC / GCC High
    • ITAR/EAR environments
    • Security boundary and data-flow considerations.
  • Must understand that we have a separate GCC High environment in a separate CUI enclave and is not to be incorporated into the general collaboration environment without specific architectural and compliance approval.
Qualified Candidates Only: If you wish to learn more about this opportunity and additional qualifications/responsibilities, please submit your resume. To learn more about Ekman Associates, Inc. please visit our website at www.ekmanassociates.com.

Similar jobs

Browse related jobs

Apply now