Senior Microsoft GCCH Engineer

We are looking for a Senior Microsoft GCC/GCCH Engineer to join our team and help organizations strengthen their Microsoft 365 security, compliance, and governance capabilities. In this client-facing role, you will work across the full engagement lifecycle, from discovery and solution design to hands-on implementation, supporting organizations operating in highly regulated environments.

As a trusted advisor and technical expert, you will guide clients through Microsoft GCC and GCCH initiatives focused on data governance, information protection, compliance, and security best practices. This is an excellent opportunity for a consultant who enjoys solving complex challenges, working with diverse clients, and delivering impactful Microsoft cloud solutions.

• US Person status (US citizen or lawful permanent resident) is required because of ITAR/EAR export-control obligations on client data and environments.
• 5+ years of hands-on Microsoft 365 engineering experience, including at least 2 years deploying and administering GCC and/or GCC High tenants in production.
• Deep understanding of how GCC and GCC High differ from commercial: feature parity gaps and release delays, sovereign endpoints (.us portals, login.microsoftonline.us, graph.microsoft.us), and limitations on third-party app and integration support.
• Strong knowledge of Microsoft 365 workloads in government clouds:
  Exchange Online, SharePoint Online, Teams, and One Drive.
• Solid experience with Entra  sovereign clouds, including Conditional Access, PIM, MFA, cross-cloud B2B collaboration, and hybrid identity with Entra Connect / Cloud Sync.
• Hands-on experience with Microsoft Intune, Defender for Endpoint/Office 365, and Microsoft Purview (sensitivity labels, DLP, audit) in GCC/GCC High.
• Working knowledge of Azure Government (subscriptions, networking, resource management).
• Proven experience with tenant migrations from Commercial to GCC High (mailboxes, SharePoint/One Drive, Teams, identities, devices) using native and third-party tools (e.g., Quest, Bit Titan, AvePoint).
• Strong understanding of the regulatory drivers behind GCC/GCC High:
  CMMC 2.0, NIST SP 800-171, DFARS , ITAR/EAR
  , FedRAMP, and CUI handling requirements.
• Experience mapping Microsoft 365 configurations to NIST 800-171 controls and contributing to System Security Plans (SSP), POA&Ms, and shared responsibility matrices.
• Understanding of GCC/GCC High licensing, eligibility validation, and procurement paths (Microsoft direct and AOS-G partners).
• Proficiency with Power Shell (including sovereign cloud connection parameters) and Microsoft Graph API for automation and administration.
• Experience in client-facing consulting roles: leading workshops, gathering requirements, and presenting solutions.
• Fluent English (written and spoken).
• Ability to work independently, manage your own time, and deliver without day-to-day supervision.

• Support sales teams in qualifying opportunities, including assessing client eligibility and which cloud fits (Commercial vs GCC vs GCC High)
• Prepare and deliver technical presentations, demos, and proof-of-concepts
• Contribute technical content to RFP/RFI responses and proposals, including compliance mapping for CMMC/NIST 800-171

• Conduct discovery sessions and readiness assessments of client environments, CUI data flows, and compliance posture
• Define technical scope, target architecture, migration strategy, and implementation approach
• Produce effort estimates, statements of work, and technical solution descriptions
• Design, deploy, and configure GCC / GCC High tenants according to agreed scope and security baselines
• Perform Commercial-to-GCC High migrations, identity and device transitions, and integrations
• Implement security and…