Active Directory & Microsoft 365 Tenant Migration Consultant
JOB TITLE: Active Directory & Microsoft 365 Tenant Migration Consultant JOB LOCATION: Full Remote WAGE RANGE*: $70-80/hr. JOB NUMBER: 26-00098 JOB DESCRIPTION (M&A Integration / Tenant Consolidation) 1. Background An acquiring organization has purchased another organization. Both currently operate separate Active Directory (AD) environments and Microsoft 365 (Office 365) tenants. The objective is to: Consolidate the acquired organization's AD into the acquiring organization's AD. Migrate/merge the two Microsoft 365 tenants into a single target tenant. Ensure that users from the acquired organization send and receive email using the acquiring organization's primary email domain (e.g. @company.com). An external expert/consultant (or small specialist team) is required to design and execute this transition end‐to‐end. 2. Objectives Establish a single, unified identity and collaboration environment under the target AD and Microsoft 365 tenant. Migrate users, groups, mailboxes, and associated workloads from the source environment with minimal business disruption. Implement email domain consolidation so that users from the acquired organization use the new corporate email domain as their primary address. Maintain security, compliance, and data integrity throughout. 3. Scope of Work / Key Responsibilities Discovery & Design Assess current environments for both organizations, including: On‐premises AD forests/domains, trusts, Group Policies, OU structure. Azure AD / Entra ID configuration and synchronization (e.g., AAD Connect / Cloud Sync). Microsoft 365 tenants (Exchange Online, OneDrive, SharePoint, Teams, security & compliance). Document current identity, authentication, mail flow, and DNS configurations. Define the target‐state architecture: Target AD structure (OU design, GPO strategy, group strategy). Target Microsoft 365 configuration and licensing alignment. Target email domain strategy (primary SMTP, aliases, reply‐to behavior). Produce a detailed migration strategy and runbook: Phased vs. big‐bang migration. Coexistence strategy (GAL sync, mail routing, cross‐tenant collaboration if needed). Rollback/contingency plans. Active Directory Integration Plan and execute migration of source AD objects into the target AD: Users, groups, service accounts, and (if in scope) devices and GPOs. Preserve access rights and group memberships where required. Implement appropriate trusts or temporary coexistence configurations during transition. Align UPN suffixes and logon formats with target standards (including new corporate email domain where applicable). Optimize AD for long‐term manageability and security (e.g., delegated admin model, GPO hygiene). Microsoft 365 Tenant‐to‐Tenant Migration Plan and execute tenant‐to‐tenant migration (source → target) for: Exchange Online mailboxes, shared mailboxes, and distribution lists. OneDrive for Business content. SharePoint Online sites and permissions. Microsoft Teams (teams, channels, chats, meetings where in scope). Select and configure appropriate migration tools (e.g., Quest, BitTitan, ShareGate, native cross‐tenant mailbox migration). Implement coexistence as required: Address book (GAL) visibility between organizations during transition. Cross‐tenant calendar sharing and meeting interoperability (if needed). Coordinate DNS changes (MX, Autodiscover, SPF, DKIM, DMARC) to support the consolidated tenant and target email domain. Email Domain Consolidation Design and implement the transition so that users from the acquired organization send and receive email using the target corporate domain: Configure primary SMTP and alias addresses. Update Outlook profiles and mobile clients as needed. Ensure mail flow continuity for legacy domains (aliases and forwarding). Validate internal and external mail routing, reply behavior, and display names post‐cutover. Security, Compliance, and Governance Ensure retention policies, legal holds, eDiscovery, and audit requirements are preserved during migration. Align security baselines to target organization standards (MFA, conditional access, device compliance, privileged access). Validate compliance with applicable regulatory, audit, and data‐protection requirements. Testing, Cutover & Support Develop and execute test plans (pilot migrations, UAT with selected user groups). Perform production cutovers (potentially in waves by site, department, or region). Provide hyper‐care support immediately post‐migration, including: Troubleshooting identity, access, and email issues. Fine‐tuning DNS, mail flow, and client configurations. Produce as‐built documentation and knowledge‐transfer materials for internal IT teams. 4. Deliverables Discovery & assessment report of both existing environments. Target architecture and detailed migration design. Migration runbook including: Step‐by‐step technical procedures. Rollback plan and risk log. Configured AD and Microsoft 365 environments as per design. Completed migration of in‐scope users, groups, mailboxes, and workloads. Verified primary use of the target corporate email domain for all in‐scope users. Final as‐built documentation and handover session(s) with internal IT. 5. Required Skills & Experience Vendors should propose consultants who meet most or all of the following: 7 years of hands‐on experience with: Active Directory (AD DS), Group Policy, AD migrations. Azure AD / Microsoft Entra ID, synchronization tools (AAD Connect / Cloud Sync). Microsoft 365 (Office 365) – especially Exchange Online, OneDrive, SharePoint, and Teams. Proven track record of at least two Microsoft 365 tenant‐to‐tenant migrations, ideally in an M&A context. Demonstrated experience in AD forest/domain consolidations. Strong experience designing and running complex email/domain migrations: SMTP namespace consolidation. DNS and mail routing (MX, SPF, DKIM, DMARC). Proficiency in PowerShell scripting and automation for Microsoft 365 and AD. Solid understanding of Microsoft 365 security and compliance (retention, legal hold, DLP, conditional access, MFA). Excellent documentation and communication skills; able to work with both technical IT staff and non‐technical stakeholders. Relevant Microsoft certifications (strongly preferred), e.g.: Microsoft 365 Certified: Administrator Expert. Microsoft Certified: Identity and Access Administrator Associate. Related Azure and/or security certifications. 6. Nice‐to‐Have Experience Prior work with large, global enterprises and complex multi‐site environments. Experience in M&A integrations and IT carve‐outs. Familiarity with specific migration tools (Quest, BitTitan, ShareGate, etc.) and cross‐tenant Teams/SharePoint migrations. Experience supporting user communication and change‐management for similar projects. Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities * While an hourly range is posted for this position, an eventual hourly rate is determined by a comprehensive salary analysis which considers multiple factors including but not limited to: job-related knowledge, skills and qualifications, education and experience as compared to others in the organization doing substantially similar work, if applicable, and market and business considerations. Benefits offered include medical, dental and vision benefits; dependent care flexible spending account; 401(k) plan; voluntary life/short term disability/whole life/term life/accident and critical illness coverage; employee assistance program; sick leave in accordance with regulation. Benefits may be subject to generally applicable eligibility, waiting period, contribution, and other requirements and conditions. Benefits offered are in accordance with applicable federal, state, and local laws and subject to change at TCM's discretion.
