Senior Microsoft GCCH Engineer

We are looking for a Senior Microsoft GCC/GCCH Engineer to join our team and help organizations strengthen their Microsoft 365 security, compliance, and governance capabilities. In this client-facing role, you will work across the full engagement lifecycle, from discovery and solution design to hands-on implementation, supporting organizations operating in highly regulated environments.
As a trusted advisor and technical expert, you will guide clients through Microsoft GCC and GCCH initiatives focused on data governance, information protection, compliance, and security best practices. This is an excellent opportunity for a consultant who enjoys solving complex challenges, working with diverse clients, and delivering impactful Microsoft cloud solutions.

Requirements

• US Person status (US citizen or lawful permanent resident) is required because of ITAR/EAR export-control obligations on client data and environments.
• 5+ years of hands-on Microsoft 365 engineering experience, including at least 2 years deploying and administering GCC and/or GCC High tenants in production.
• Deep understanding of how GCC and GCC High differ from commercial: feature parity gaps and release delays, sovereign endpoints (.us portals, login.microsoftonline.us, graph.microsoft.us), and limitations on third-party app and integration support.
• Strong knowledge of Microsoft 365 workloads in government clouds: Exchange Online, SharePoint Online, Teams, and OneDrive.
• Solid experience with Entra ID in sovereign clouds, including Conditional Access, PIM, MFA, cross-cloud B2B collaboration, and hybrid identity with Entra Connect / Cloud Sync.
• Hands-on experience with Microsoft Intune, Defender for Endpoint/Office 365, and Microsoft Purview (sensitivity labels, DLP, audit) in GCC/GCC High.
• Working knowledge of Azure Government (subscriptions, networking, resource management).
• Proven experience with tenant migrations from Commercial to GCC High (mailboxes, SharePoint/OneDrive, Teams, identities, devices) using native and third-party tools (e.g., Quest, BitTitan, AvePoint).
• Strong understanding of the regulatory drivers behind GCC/GCC High: CMMC 2.0, NIST SP 800-171, DFARS 252.204-7012, ITAR/EAR, FedRAMP, and CUI handling requirements.
• Experience mapping Microsoft 365 configurations to NIST 800-171 controls and contributing to System Security Plans (SSP), POA&Ms, and shared responsibility matrices.
• Understanding of GCC/GCC High licensing, eligibility validation, and procurement paths (Microsoft direct and AOS-G partners).
• Proficiency with PowerShell (including sovereign cloud connection parameters) and Microsoft Graph API for automation and administration.
• Experience in client-facing consulting roles: leading workshops, gathering requirements, and presenting solutions.
• Fluent English (written and spoken).
• Ability to work independently, manage your own time, and deliver without day-to-day supervision.
• Valid Microsoft certifications, e.g., MS-102 (Microsoft 365 Administrator), SC-300, MD-102, or equivalent demonstrable experience.

Responsibilities

Pre-sales:

• Support sales teams in qualifying opportunities, including assessing client eligibility and which cloud fits (Commercial vs GCC vs GCC High)
• Prepare and deliver technical presentations, demos, and proof-of-concepts
• Contribute technical content to RFP/RFI responses and proposals, including compliance mapping for CMMC/NIST 800-171

Project scoping:

• Conduct discovery sessions and readiness assessments of client environments, CUI data flows, and compliance posture
• Define technical scope, target architecture, migration strategy, and implementation approach
• Produce effort estimates, statements of work, and technical solution descriptions

Project execution:

• Design, deploy, and configure GCC / GCC High tenants according to agreed scope and security baselines
• Perform Commercial-to-GCC High migrations, identity and device transitions, and integrations
• Implement security and compliance controls that support CMMC Level 2 and NIST 800-171 requirements
• Troubleshoot technical issues, including sovereign-cloud-specific limitations and workarounds
• Document delivered solutions, contribute to SSP artifacts, and provide knowledge transfer and training to client teams
• Support handover, hypercare, and post-delivery reviews

Nice to have

• CMMC credentials: Certified CMMC Professional (CCP) or Certified CMMC Assessor (CCA)
• Additional certifications: SC-100, AZ-500, AZ-104, SC-400, SC-200, CISSP, or Security+
• Experience supporting clients through C3PAO assessments or DIBCAC reviews
• Experience with Microsoft Sentinel in Azure Government and Defender XDR in GCC High
• Experience with Azure Virtual Desktop or Windows 365 in government clouds
• Knowledge of other regimes such as CJIS, IRS 1075, StateRAMP, or HIPAA
• Experience with GCC High-compatible third-party tools (backup, email security, MDM, PSA/RMM)
• Active US government security clearance
• Strong visualization and storytelling skills for executive-level presentations

Working conditions

• Engagement model: Part-time, with ongoing collaboration across client projects and opportunities, without the demands of a full-time role
• Location: Fully remote, based in the United States
• Schedule: Flexible hours coordinated around project needs; availability for client meetings in US time zones
• Workload: Part-time with natural variation: busier around project delivery, assessment deadlines, and pre-sales cycles, quieter in between

Why work with us?

Our Culture

• Open communication and a focus on psychological safety
• Recognition of achievements and contributions
• Collaboration across multicultural teams
• Less bureaucracy, more focus on results

Hiring Process

• Intro call
• Technical interview
• Manager interview
• Pre-offer stage + reference check (if requested)
• Official offer