Remote Microsoft 365 Migration & IAM Lead

Tkxel LLC; Reston, Northern (VA, KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Tkxel, a software development company based in Reston, Virginia, seeks an experienced Microsoft 365 & Identity / Access Management Engineer for a remote role. You will own the end-to-end migration from a Commercial subscription to a Business tenant and build a robust, secure identity and access framework.

You will plan, execute, and stabilize the environment post-migration, including on-prem AD and directory synchronization, with a focus on least-privilege access and reliable ops.

Qualifications

• 5+ years administering Microsoft 365 in a production environment.
• Experience migrating an entire tenant or subscription end-to-end.
• Strong hands-on Exchange Online experience: mail flow, migrations, troubleshooting.

Responsibilities

• Plan the migration from Commercial to Business tenant with minimal downtime.
• Execute mailbox migration in Exchange Online and ensure coexistence during transition.
• Migrate SharePoint Online, OneDrive for Business, and Teams content with permissions preserved.
• Manage domain transfer and DNS cutover (MX, SPF, DKIM, Autodiscover) with minimal disruption.
• Document runbooks, architecture diagrams, and hand over to BAU operations.
• Provide escalation support and ensure environment stability post-migration.

Skills

Microsoft 365 administration

Exchange Online

Active Directory administration

PowerShell scripting

RBAC design / permissions

Tools

SharePoint Online

OneDrive for Business

Teams

Job description

Tkxel, a software development company based in Reston, Virginia, seeks an experienced Microsoft 365 & Identity / Access Management Engineer for a remote role. You will own the end-to-end migration from a Commercial subscription to a Business tenant and build a robust, secure identity and access framework.

You will plan, execute, and stabilize the environment post-migration, including on-prem AD and directory synchronization, with a focus on least-privilege access and reliable ops.