Job description

Our client is seeking an experienced M365 Architect to lead the configuration and security of their Microsoft 365 GCC-High tenant, with a focus on endpoint protection and secure external collaboration. This individual will play a critical role in aligning their M365 environment with federal compliance standards while optimizing user experience and maintaining strong security protocols. Key Responsibilities: • Configure and secure the M365 GCC-High tenant, with emphasis on external collaboration settings and data protection. • Design and implement Conditional Access Policies to balance security with usability across managed and BYOD devices. • Manage identity and access through Microsoft Entra ID, including role-based access control and multifactor authentication. • Oversee endpoint security for Windows, Linux, and Mac devices, ensuring compliance and system integrity. • Collaborate with security, compliance, and IT operations teams to meet federal security standards such as NIST 800-171 and CMMC. Required Skills / Qualifications: • Deep expertise in securing Microsoft 365 environments, particularly for external collaboration scenarios. • Strong knowledge of Conditional Access Policies and their impact on devices, applications, and user workflows. • Hands-on experience with Microsoft Entra ID (formerly Azure AD). • Advanced knowledge of endpoint security across multiple OS platforms (Windows, Linux, Mac). • Active Security+ certification. Preferred Skills / Qualifications: • At least 1 year of experience working within M365 GCC-High or GovCloud environments. • Proficiency with Microsoft Intune for device management and policy enforcement. • Familiarity with CrowdStrike or similar endpoint detection and response (EDR) tools. • Experience supporting compliance initiatives related to NIST 800-171 and/or CMMC. • Microsoft certifications Aleron companies (Acara Solutions, Aleron Shared Resources, Broadleaf Results, Lume Strategies, TalentRise, Viaduct) are an Equal Opportunity Employer. Race/Color/Gender/Religion/National Origin/Disability/Veteran. Applicants for this position must be legally authorized to work in the United States. This position does not meet the employment requirements for individuals with F-1 OPT STEM work authorization status.

Requirements