MS 365 / Entra Architect

Job DescriptionTitle: MS 365 / Entra Architect Location: Remote Ekman Associates is a management consulting firm that specializes in developing business, digital, and technology strategy, delivering solutions, and addressing human resource demands.Summary:Seeking an experienced Microsoft 365 / Microsoft Entra ID SME to design, configure, and implement a secure Microsoft 365 cross-tenant collaboration architecture across three independent business-unit environments. This is a \"hands-on" role & engagement.Key Experience: M365 Commercial + GCC Entra cross-tenant/MTO CMMC/GCC Responsibilities: Work directly with IT leadership & individual business unit IT site administrators & vendor-partners to establish a practical, secure, and supportable architecture enabling cross-company calendar free/busy, identity collaboration, and controlled SharePoint/OneDrive file and folder sharing, while maintaining appropriate CMMC and data-segregation requirements.Assess the current Microsoft 365, Entra ID, Exchange Online, SharePoint, and security configurations across the three production tenants. Develop the target-state architecture for cross-tenant collaboration. Evaluate and, where appropriate, implement a Microsoft Entra Multitenant Organization (MTO) and/or cross-tenant access/B2B architecture. Configure Exchange Online Organization Relationships to provide controlled cross-company calendar free/busy visibility.Configure Entra cross-tenant synchronization/B2B collaboration for appropriately selected users and groups. Design and implement controlled SharePoint Online/OneDrive cross-tenant file and folder collaboration. Establish appropriate Conditional Access, MFA, guest/external-user, access-control, and least-privilege policies. Establish security groups and governance mechanisms for cross-company collaboration. Ensure the architecture appropriately separates general corporate/non-CUI collaboration from GCC High CUI enclave.Review the implications of the newly acquired domain and recommend an appropriate corporate identity/namespace strategy. Assess the deprecated AdTech Commercial tenant for any remaining dependencies and recommend/assist with retirement where appropriate. Document the resulting architecture, configuration, security controls, administration procedures, and ongoing support requirements. Provide knowledge transfer to staff and leave the environment fully supportable after completion.Qualifications:Microsoft 365 / Office 365 administration Microsoft Entra ID experience Entra B2B and cross-tenant access Entra cross-tenant synchronization Microsoft Entra Multitenant Organizations Exchange Online and Organization Relationships SharePoint Online and OneDrive Microsoft Teams cross-tenant collaboration Conditional Access and MFA Microsoft 365 security and identity governance Microsoft 365 tenant-to-tenant architecture Microsoft Graph / PowerShell administration and automation Microsoft 365 Commercial and GCC environments Compliance / Security Experience Experience working with regulated environments is strongly preferred, particularly: CMMC NIST 800-171 CUI data segregation Microsoft 365 GCC / GCC High ITAR/EAR environments Security boundary and data-flow considerations.Must understand that we have a separate GCC High environment in a separate CUI enclave and is not to be incorporated into the general collaboration environment without specific architectural and compliance approval. Qualified Candidates Only: If you wish to learn more about this opportunity and additional qualifications/responsibilities, please submit your resume. To learn more about Ekman Associates, Inc. please visit our .