CIPP / Microsoft 365 Expert Needed Tenant Migration & Onboarding

Description We are looking for an experienced CIPP expert, specifically CyberDrain Improved Partner Portal, not the privacy certification to support a confidential Microsoft 365 tenant migration. This project involves moving a business environment from an existing Microsoft 365 / Entra tenant and incumbent MSP operating model into a new target tenant and support model. The work includes tenant discovery, identity and security review, target tenant preparation, migration readiness, cutover validation, and post-migration operational setup. The selected consultant must be comfortable working in a security-sensitive environment where customer names, domains, vendors, and internal business details will only be disclosed after NDA and onboarding. KEY RESPONSIBILITIES The consultant will assist with the following: CIPP / MSP Administration • Review or help configure CIPP for Microsoft 365 multi-tenant administration. • Validate delegated administration approach, including GDAP / DAP considerations. • Recommend secure MSP operating practices using CIPP. • Help define repeatable workflows for tenant standards, user management, reporting, and ongoing administration. Microsoft 365 / Entra Tenant Discovery • Inventory users, groups, licenses, guest users, roles, app registrations, Enterprise Applications, and service principals. • Review Conditional Access policies, MFA settings, named locations, exclusions, break-glass accounts, and privileged access. • Document source-to-target tenant configuration gaps. Target Tenant Preparation • Assist with preparing the target Microsoft 365 / Entra environment. • Help recreate required users, groups, roles, Conditional Access policies, MFA settings, and security baselines. • Validate that the target tenant is ready before migration and cutover. Exchange Online, SharePoint, OneDrive, and Teams • Support readiness for mailbox, shared mailbox, distribution group, Teams, SharePoint, and OneDrive migration. • Review mail flow, shared mailbox permissions, mailbox rules, and post-cutover deliverability. • Help validate retention, legal hold, or compliance-sensitive data requirements where applicable. Application and SSO Support • Review third-party application integrations that rely on Entra ID, SAML, OAuth, service principals, app registrations, or Enterprise Applications. • Help recreate or validate required SSO and identity configurations in the target tenant. • Identify authentication dependencies that could break during cutover. DNS, Domain, and Email Security • Assist with domain and DNS transition planning. • Support review of MX, SPF, DKIM, DMARC, autodiscover, and Microsoft 365 tenant validation records. • Help define safe cutover and rollback steps. Endpoint and Post-Migration Operations • Support Microsoft Intune / Endpoint Manager readiness. • Assist with post-migration validation of identity, mail, data access, applications, and endpoint management. • Help establish repeatable operational processes for joiners, movers, leavers, access reviews, endpoint compliance, patching, alerts, and reporting. REQUIRED EXPERIENCE Please only apply if you have strong hands-on experience with: • CIPP / CyberDrain Improved Partner Portal • Microsoft 365 administration for MSPs • Microsoft Partner Center • GDAP / DAP / delegated administration • Microsoft Entra ID / Azure AD • Conditional Access • MFA and privileged access controls • Exchange Online • SharePoint Online • OneDrive • Microsoft Teams • Microsoft Intune / Endpoint Manager • PowerShell • Microsoft Graph • Microsoft 365 tenant-to-tenant migration • DNS, SPF, DKIM, DMARC, and mail-flow validation • SSO, SAML, OAuth, app registrations, and Enterprise Applications • MSP onboarding / offboarding processes • Security-conscious documentation and change control NICE TO HAVE Experience with any of the following would be helpful: • Migration tooling for Microsoft 365 data moves • Azure Virtual Desktop or Azure compute environments • Power BI / Fabric workspace considerations • Project workspace or project management platform migrations • CRM, ERP, GIS, contract management, or industry-specific application integrations • RMM tooling transitions • Email security tool transitions • Security alerting / SaaS monitoring platforms • NIST-style security baselines • Legal hold, preservation hold, retention, or compliance-sensitive migrations DELIVERABLES We would like the consultant to help produce or support: • CIPP readiness review • CIPP configuration recommendations • Source tenant discovery checklist • Target tenant readiness checklist • GDAP / DAP / delegated administration review • Security, Conditional Access, and MFA validation notes • App registration and SSO dependency review • Exchange / SharePoint / OneDrive / Teams readiness review • DNS and email security cutover checklist • Migration risk register • Cutover validation checklist • Rollback considerations • Post-migration operational workflow recommendations IDEAL CANDIDATE The ideal candidate is a senior Microsoft 365 / MSP engineer with real-world CIPP experience. You should be practical, security-minded, and comfortable working through complex tenant transition details. You should be able to review an existing migration plan, identify risks, ask the right technical questions, recommend secure CIPP/MSP practices, and assist with hands-on validation before and after cutover. Because this is a confidential project, specific customer names, domains, vendors, tenant names, and application names will only be shared after NDA. ENGAGEMENT TYPE We are open to hourly or milestone-based work. The initial scope will likely begin with a technical review and advisory session, followed by hands-on support during tenant preparation, migration readiness, cutover, and post-migration validation. TO APPLY Please include: • A brief summary of your CIPP experience. • Examples of Microsoft 365 tenant migration or MSP onboarding projects you have supported. • Your experience with GDAP, Entra ID, Conditional Access, Exchange Online, SharePoint, OneDrive, Teams, and Intune. • Your experience with PowerShell and Microsoft Graph. • Your approach to identifying tenant migration risks before cutover. • Your availability for an initial technical discovery call.