Start searching
Back to Jobs
RemoteOther

MS 365 / Entra Architect

Ekman Associates, Inc.Almont, CO🇺🇸United StatesPosted Oct 11, 2026

Why this role stands out

This remote role offers a significant opportunity to design and implement a critical Microsoft 365 and Entra ID cross-tenant collaboration architecture, allowing you to leverage your expertise in a high-impact project. You'll thrive here if you are a hands-on architect with deep experience in M365, Entra, and cross-tenant solutions, eager to contribute to a leading management consulting firm. Apply now to shape innovative technology strategies and advance your career.

Quick overview

SeniorityMid Senior
Work modeRemote
LocationAlmont, CO, United States
Posted2 weeks ago
MFACompliancePowerShell

Job description

Job Description
Title: MS 365 / Entra Architect
Location: Remote
Ekman Associates is a management consulting firm that specializes in developing business, digital, and technology strategy, delivering solutions, and addressing human resource demands.
Summary:
Seeking an experienced Microsoft 365 / Microsoft Entra ID SME to design, configure, and implement a secure Microsoft 365 cross-tenant collaboration architecture across three independent business-unit environments. This is a "hands-on” role & engagement.
Key Experience:
  • M365 Commercial + GCC
  • Entra cross-tenant/MTO
  • CMMC/GCC
Responsibilities:
  • Work directly with IT leadership & individual business unit IT site administrators & vendor-partners to establish a practical, secure, and supportable architecture enabling cross-company calendar free/busy, identity collaboration, and controlled SharePoint/OneDrive file and folder sharing, while maintaining appropriate CMMC and data-segregation requirements.
  • Assess the current Microsoft 365, Entra ID, Exchange Online, SharePoint, and security configurations across the three production tenants.
  • Develop the target-state architecture for cross-tenant collaboration.
  • Evaluate and, where appropriate, implement a Microsoft Entra Multitenant Organization (MTO) and/or cross-tenant access/B2B architecture.
  • Configure Exchange Online Organization Relationships to provide controlled cross-company calendar free/busy visibility.
  • Configure Entra cross-tenant synchronization/B2B collaboration for appropriately selected users and groups.
  • Design and implement controlled SharePoint Online/OneDrive cross-tenant file and folder collaboration.
  • Establish appropriate Conditional Access, MFA, guest/external-user, access-control, and least-privilege policies.
  • Establish security groups and governance mechanisms for cross-company collaboration.
  • Ensure the architecture appropriately separates general corporate/non-CUI collaboration from GCC High CUI enclave.
  • Review the implications of the newly acquired domain and recommend an appropriate corporate identity/namespace strategy.
  • Assess the deprecated AdTech Commercial tenant for any remaining dependencies and recommend/assist with retirement where appropriate.
  • Document the resulting architecture, configuration, security controls, administration procedures, and ongoing support requirements.
  • Provide knowledge transfer to staff and leave the environment fully supportable after completion.
Qualifications:
  • Microsoft 365 / Office 365 administration
  • Microsoft Entra ID experience
  • Entra B2B and cross-tenant access
  • Entra cross-tenant synchronization
  • Microsoft Entra Multitenant Organizations
  • Exchange Online and Organization Relationships
  • SharePoint Online and OneDrive
  • Microsoft Teams cross-tenant collaboration
  • Conditional Access and MFA
  • Microsoft 365 security and identity governance
  • Microsoft 365 tenant-to-tenant architecture
  • Microsoft Graph / PowerShell administration and automation
  • Microsoft 365 Commercial and GCC environments
  • Compliance / Security Experience
  • Experience working with regulated environments is strongly preferred, particularly:
    • CMMC
    • NIST 800-171
    • CUI data segregation
    • Microsoft 365 GCC / GCC High
    • ITAR/EAR environments
    • Security boundary and data-flow considerations.
  • Must understand that we have a separate GCC High environment in a separate CUI enclave and is not to be incorporated into the general collaboration environment without specific architectural and compliance approval.
Qualified Candidates Only: If you wish to learn more about this opportunity and additional qualifications/responsibilities, please submit your resume. To learn more about Ekman Associates, Inc. please visit our website at www.ekmanassociates.com.

Similar jobs

Apply