> Markdown version of [/jobs/ext/4616019-ms-365-entra-architect](https://www.wearedevelopers.com/jobs/ext/4616019-ms-365-entra-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# MS 365 / Entra Architect

- **Company:** Ekman Associates, Inc.
- **Location:** Orange, CA, United States (Remote available)
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Data Flow Control, Identity and Access Management, IT Management, Microsoft Office, Windows PowerShell, Azure Active Directory, Microsoft SharePoint, Office365
- **Published:** November 7, 2026
- **Apply:** https://www.thejobnetwork.com/job/b24594c5-66bb-4b49-8c88-d7c75c1690c6/ms-entra-architect

## About the Role

* M365 Commercial + GCC
 * Entra cross-tenant/MTO
 * CMMC/GCC, * Microsoft 365 / Office 365 administration
 * Microsoft Entra ID experience
 * Entra B2B and cross-tenant access
 * Entra cross-tenant synchronization
 * Microsoft Entra Multitenant Organizations
 * Exchange Online and Organization Relationships
 * SharePoint Online and OneDrive
 * Microsoft Teams cross-tenant collaboration
 * Conditional Access and MFA
 * Microsoft 365 security and identity governance
 * Microsoft 365 tenant-to-tenant architecture
 * Microsoft Graph / PowerShell administration and automation
 * Microsoft 365 Commercial and GCC environments
 * Compliance / Security Experience
 * Experience working with regulated environments is strongly preferred, particularly:
 + CMMC
 + NIST 800-171
 + CUI data segregation
 + Microsoft 365 GCC / GCC High
 + ITAR/EAR environments
 + Security boundary and data-flow considerations.
 * Must understand that we have a separate GCC High environment in a separate CUI enclave and is not to be incorporated into the general collaboration environment without specific architectural and compliance approval.

## Description

Seeking an experienced Microsoft 365 / Microsoft Entra ID SME to design, configure, and implement a secure Microsoft 365 cross-tenant collaboration architecture across three independent business-unit environments. This is a "hands-on" role & engagement., * Work directly with IT leadership & individual business unit IT site administrators & vendor-partners to establish a practical, secure, and supportable architecture enabling cross-company calendar free/busy, identity collaboration, and controlled SharePoint/OneDrive file and folder sharing, while maintaining appropriate CMMC and data-segregation requirements.

 * Assess the current Microsoft 365, Entra ID, Exchange Online, SharePoint, and security configurations across the three production tenants.
 * Develop the target-state architecture for cross-tenant collaboration.
 * Evaluate and, where appropriate, implement a Microsoft Entra Multitenant Organization (MTO) and/or cross-tenant access/B2B architecture.
 * Configure Exchange Online Organization Relationships to provide controlled cross-company calendar free/busy visibility.
 * Configure Entra cross-tenant synchronization/B2B collaboration for appropriately selected users and groups.
 * Design and implement controlled SharePoint Online/OneDrive cross-tenant file and folder collaboration.
 * Establish appropriate Conditional Access, MFA, guest/external-user, access-control, and least-privilege policies.
 * Establish security groups and governance mechanisms for cross-company collaboration.
 * Ensure the architecture appropriately separates general corporate/non-CUI collaboration from GCC High CUI enclave.
 * Review the implications of the newly acquired domain and recommend an appropriate corporate identity/namespace strategy.
 * Assess the deprecated AdTech Commercial tenant for any remaining dependencies and recommend/assist with retirement where appropriate.
 * Document the resulting architecture, configuration, security controls, administration procedures, and ongoing support requirements.
 * Provide knowledge transfer to staff and leave the environment fully supportable after completion.