Senior Microsoft GCCH Engineer

PeopleForce Ltd.; Northern (KY); Hybrid; USD 120,000 - 180,000; Part time

Job summary

PeopleForce Ltd. is seeking a Senior Microsoft GCC/GCCH Engineer to strengthen security, compliance, and governance for clients in highly regulated environments. You will guide data governance, Entra ID, and M365 workloads across GCC and GCC High tenants from discovery to implementation.

The role involves hands-on design, deployment, and migration work, including pre-sales support and technical content creation for RFPs. Strong communication skills and independence are essential.

Qualifications

• US Person status required due to ITAR/EAR obligations.
• 5+ years of hands-on Microsoft 365 engineering experience.
• GCC and/or GCC High tenant deployments in production.
• Experience with government cloud workloads: Exchange Online, SharePoint Online, Teams, OneDrive.
• Strong Entra ID knowledge in sovereign clouds including CA, PIM, MFA, B2B, and hybrid identity.
• Hands-on with Intune, Defender for Endpoint/Office 365, and Purview in GCC/GCC High.
• Experience with Azure Government subscriptions, networking, and resource management.
• Tenant migrations from Commercial to GCC High using native and 3rd party tools.
• Familiar with CMMC 2.0, NIST 800-171, DFARS 252.204-7012, ITAR/EAR compliance.
• Ability to map Microsoft 365 configurations to NIST controls; contribute to SSP/POA&M artifacts.
• Knowledge of GCC High licensing, eligibility validation, and procurement paths.
• PowerShell and Graph API for automation in sovereign clouds.
• Client-facing consulting experience: workshops, requirements gathering, solutions presentation.
• Fluent English (written and spoken).
• Ability to work independently and time-manage without day-to-day supervision.

Responsibilities

• Qualify opportunities with sales, assessing client eligibility and cloud fit (Commercial vs GCC vs GCC High).
• Prepare and deliver technical presentations, demos, and proofs of concept.
• Contribute technical content to RFP/RFI responses with compliance mapping.
• Conduct discovery sessions and readiness assessments of client environments and data flows.
• Define scope, target architecture, migration strategy, and implementation approach.
• Produce statements of work and technical solution descriptions.
• Design and deploy GCC / GCC High tenants per scope and security baselines.
• Perform Commercial-to-GCC High migrations and identity/device transitions.
• Document solutions, contribute to SSP artifacts, and provide knowledge transfer.

Skills

US Person status

Microsoft 365 engineering

GCC High tenants

Exchange Online

SharePoint Online

Teams

OneDrive

Entra ID

PowerShell

Microsoft Graph API

consulting experience

Fluent English

independent work

Tools

Quest

BitTitan

AvePoint

Job description

We are looking for a Senior Microsoft GCC/GCCH Engineer to join our team and help organizations strengthen their Microsoft 365 security, compliance, and governance capabilities. In this client-facing role, you will work across the full engagement lifecycle, from discovery and solution design to hands-on implementation, supporting organizations operating in highly regulated environments.

As a trusted advisor and technical expert, you will guide clients through Microsoft GCC and GCCH initiatives focused on data governance, information protection, compliance, and security best practices. This is an excellent opportunity for a consultant who enjoys solving complex challenges, working with diverse clients, and delivering impactful Microsoft cloud solutions.

Requirements

• US Person status (US citizen or lawful permanent resident) is required because of ITAR/EAR export-control obligations on client data and environments.
• 5+ years of hands-on Microsoft 365 engineering experience, including at least 2 years deploying and administering GCC and/or GCC High tenants in production.
• Deep understanding of how GCC and GCC High differ from commercial: feature parity gaps and release delays, sovereign endpoints (.us portals, login.microsoftonline.us, graph.microsoft.us), and limitations on third-party app and integration support.
• Strong knowledge of Microsoft 365 workloads in government clouds: Exchange Online, SharePoint Online, Teams, and OneDrive.
• Solid experience with Entra ID in sovereign clouds, including Conditional Access, PIM, MFA, cross-cloud B2B collaboration, and hybrid identity with Entra Connect / Cloud Sync.
• Hands-on experience with Microsoft Intune, Defender for Endpoint/Office 365, and Microsoft Purview (sensitivity labels, DLP, audit) in GCC/GCC High.
• Working knowledge of Azure Government (subscriptions, networking, resource management).
• Proven experience with tenant migrations from Commercial to GCC High (mailboxes, SharePoint/OneDrive, Teams, identities, devices) using native and third-party tools (e.g., Quest, BitTitan, AvePoint).
• Strong understanding of the regulatory drivers behind GCC/GCC High: CMMC 2.0, NIST SP 800-171, DFARS 252.204-7012, ITAR/EAR, FedRAMP, and CUI handling requirements.
• Experience mapping Microsoft 365 configurations to NIST 800-171 controls and contributing to System Security Plans (SSP), POA&Ms, and shared responsibility matrices.
• Understanding of GCC/GCC High licensing, eligibility validation, and procurement paths (Microsoft direct and AOS-G partners).
• Proficiency with PowerShell (including sovereign cloud connection parameters) and Microsoft Graph API for automation and administration.
• Experience in client-facing consulting roles: leading workshops, gathering requirements, and presenting solutions.
• Fluent English (written and spoken).
• Ability to work independently, manage your own time, and deliver without day-to-day supervision.

Responsibilities

• Support sales teams in qualifying opportunities, including assessing client eligibility and which cloud fits (Commercial vs GCC vs GCC High)
• Prepare and deliver technical presentations, demos, and proof-of-concepts
• Contribute technical content to RFP/RFI responses and proposals, including compliance mapping for CMMC/NIST 800-171

Project scoping:

• Conduct discovery sessions and readiness assessments of client environments, CUI data flows, and compliance posture
• Define technical scope, target architecture, migration strategy, and implementation approach
• Produce effort estimates, statements of work, and technical solution descriptions
• Design, deploy, and configure GCC / GCC High tenants according to agreed scope and security baselines
• Perform Commercial-to-GCC High migrations, identity and device transitions, and integrations
• Implement security and compliance controls that support CMMC Level 2 and NIST 800-171 requirements
• Troubleshoot technical issues, including sovereign-cloud-specific limitations and workarounds
• Document delivered solutions, contribute to SSP artifacts, and provide knowledge transfer and training to client teams
• Support handover, hypercare, and post-delivery reviews

Nice to have

• CMMC credentials: Certified CMMC Professional (CCP) or Certified CMMC Assessor (CCA)
• Additional certifications: SC-100, AZ-500, AZ-104, SC-400, SC-200, CISSP, or Security+
• Experience supporting clients through C3PAO assessments or DIBCAC reviews
• Experience with Microsoft Sentinel in Azure Government and Defender XDR in GCC High
• Experience with Azure Virtual Desktop or Windows 365 in government clouds
• Knowledge of other regimes such as CJIS, IRS 1075, StateRAMP, or HIPAA
• Experience with GCC High-compatible third-party tools (backup, email security, MDM, PSA/RMM)
• Active US government security clearance
• Strong visualization and storytelling skills for executive-level presentations

Working conditions

• Engagement model: Part-time, with ongoing collaboration across client projects and opportunities, without the demands of a full-time role
• Location: Fully remote, based in the United States
• Schedule: Flexible hours coordinated around project needs; availability for client meetings in US time zones
• Workload: Part-time with natural variation: busier around project delivery, assessment deadlines, and pre-sales cycles, quieter in between

Why work with us?

Our Culture

• Open communication and a focus on psychological safety
• Recognition of achievements and contributions
• Collaboration across multicultural teams
• Less bureaucracy, more focus on results

Hiring Process

• Technical interview
• Pre-offre stage + reference check (if requested)