Job description
Position Summary:
We are seeking an experienced Microsoft Entra Tenant-to-Tenant Design & Migration Expert to architect, plan, and execute a complex Microsoft 365 and Azure separation as a company transitions from a single Microsoft tenant into multiple tenants while maintaining seamless collaboration. This role requires deep expertise in Microsoft Entra ID (formerly Azure AD), M365 migrations, hybrid environments, and Azure resource management to ensure a smooth, secure, and efficient migration with minimal business disruption.
Key Responsibilities:
Tenant Separation Strategy & Planning:
- Design and document a comprehensive tenant-to-tenant migration strategy, covering identity, access management, security policies, compliance, and licensing.
- Define the co-existence model for ongoing collaboration between companies post-separation (e.g., Teams, SharePoint, Exchange).
- Identify and mitigate dependencies between existing Microsoft services, Azure resources, and on-premises environments.
Identity & Access Management (IAM) Migration:
- Assess and plan the separation of Microsoft Entra ID (Azure AD) tenants, ensuring a smooth transition of users, groups, applications, and permissions.
- Implement secure cross-tenant collaboration strategies for seamless access and communication.
- Evaluate authentication models, MFA, SSO, and Conditional Access policies for both entities.
Microsoft 365 & Collaboration Migration:
- Plan and execute Microsoft 365 (M365) tenant migration, including Exchange Online, Teams, SharePoint, OneDrive, and Intune.
- Establish secure B2B cross-tenant access to maintain collaboration between companies.
- Implement and optimize hybrid Exchange configurations and domain migrations.
Azure Resource & Subscription Separation:
- Assess and restructure Azure subscriptions, resource groups, networking, and security configurations across multiple tenants.
- Migrate Azure Virtual Machines (VMs), SQL databases, storage accounts, and application services.
- Ensure compliance with security frameworks, governance policies, and cost management best practices.
On-Premises & Hybrid Integration:
- Analyze and migrate on-premises Active Directory (AD) environments, ensuring proper domain separation and reconfiguration.
- Adjust and migrate internal/external DNS configurations to reflect the new tenant structure.
- Ensure continued integration between hybrid identities and on-premises systems.
Security & Compliance Assurance:
- Define and implement security policies, compliance measures, and data governance strategies.
- Implement Zero Trust architecture principles across multiple tenants.
- Conduct security assessments to identify and mitigate risks before, during, and after migration.
Qualifications & Skills:
- Deep expertise in Microsoft Entra ID (Azure AD), including cross-tenant migration, B2B collaboration, and access control.
- Strong experience with Microsoft 365 migrations, covering Exchange Online, Teams, SharePoint, OneDrive, and hybrid environments.
- Expertise in Azure subscription design, management, and migrations, including governance, networking, and security.
- Strong understanding of on-premises Active Directory (AD), hybrid identity models, and DNS management.
- Experience with Microsoft Exchange Hybrid Configuration & Domain Migration.
- PowerShell scripting and automation for tenant migration tasks.
- Knowledge of Microsoft security best practices, compliance frameworks, and Zero Trust principles.
- Experience working in complex enterprise environments with 1,000+ users.
- Relevant certifications (preferred): Microsoft Certified: Identity and Access Administrator Associate, Microsoft 365 Certified: Enterprise Administrator Expert, or Microsoft Azure Solutions Architect Expert.
