We are seeking a skilled Network Migration Support Specialist to assist with our network migration project. The ideal candidate will have experience in network administration and security, ensuring a smooth transition to our new network infrastructure. Responsibilities include configuring network devices, troubleshooting connectivity issues, and ensuring network security protocols are in place. The role requires strong problem-solving skills and the ability to work independently.

Role Level: IC3 Role Title: Security Administrator II (US Contract) Reports to: Manager of Engineering Services Salary: $41/h Job Description The Security Administrator role supports BEMO managed service customers and internal teams by assisting in the implementation, management, and monitoring of security and compliance solutions across Microsoft 365 and hybrid environments. This role is focused on a security-centric customer base, and we are specifically seeking candidates with experience working in GCC High tenants. In this role, you will also have the opportunity to lead compliance frameworks, including SOC 2, ISO, and CMMC, by maintaining security and compliance requirements across regulated environments. The Security Administrator II IC3 will demonstrate the ability to conduct routine work with specialist and commercial knowledge in the following areas: • Microsoft 365 Security Administration • Azure • GRC Platforms • AI tools • Customer Service • Managed Services • Team Communication • Data Gathering and Analysis At BEMO, the Security Administrator IC3 competencies require: • Understanding of prioritization and time management of tasks • Building effective working relationships within the team and with peers • Demonstrates skill to influence other peers • Conducts complex tasks autonomously • Works on problems of moderate scope and uses multiple known practices and procedures to solve problems with the support of manager and peers • The ability to respond to customers’ security and compliance needs proactively and reactively in the alignment of BEMO’s products and service scope • Clear and open communicator with wider teams and stakeholders • Maintains transactional communication with customers or partners • Builds self-awareness about strengths and areas of development by being open to feedback from your manager and peers. • Consistently seeks to improve technical knowledge in the Microsoft technology and security areas Responsibilities & Primary Goals • Monitoring and Maintenance o Proactively secure Microsoft 365 and Azure environments o Monitor all security systems and provide advice on strategy and implementation for the customer base o Conduct security risk and vulnerability assessments on security package customers o Enforce data governance o Patch and vulnerability-managed life cycle o Implement updates programmatically on different security packages offered by BEMO o Send out customer communications on security improvements and maintenance • Automation and Implementation of Managed Service Solutions o Create and document repeatable processes through automation across our managed service maintenance activities o Manage internal projects, provide technical guidance o Must be comfortable performing multiple initiatives simultaneously in a fast-paced environment o Leverage AI and automation technologies to optimize processes, improve response times, and enhance overall managed service delivery • Cross-Group Collaboration and Support o Support the Customer Success team with customer-specific data for security scores and value realization efforts o Provide T1-T2 Team members support for tickets and issues relevant to managed service customers' security and compliance o Working with the BEMO IT Manager to align security policies and processes o Work collaboratively with delivery engineers, operations team members, customer success managers, support engineers, and our BEMO customers o Manage support queue during designated times • Managed Security o Triage: Working with our SOC team and Microsoft Sentinel, you will help filter the noise to prioritize incidents and alerts that matter to alleviate alert fatigue. o Investigate: Investigate and analyze the most critical incidents, and document progress and findings. You will be analyzing logs within M365 tools and Sentinel. o Respond: Contain and mitigate incidents faster with managed response and proactive remediation. o Prevent: Provide detailed recommendations and best practices to go beyond detection and response to prevent future attacks Requirements • Educational degree or diploma in Computer Science, Engineering, or the equivalent in proven experience • 2 + years of experience administrating, managing, and implementing Microsoft Azure and Microsoft 365 as an implementation, security, or support engineer. • Experience analyzing M365 usage data to identify issues and usage patterns • Strong critical thinking, analysis, and problem-solving skills • Strong competency in core professional skills, especially attention to detail, responsiveness, follow-through, and flexibility, with a high degree of emotional intelligence and tact • Ability to work independently and collaboratively with other internal teams when needed • Proven customer service experience with clear and consistent writing, presentation, and communication skills • Azure Cloud experience Specialized Knowledge or Skills Preferred • A Bachelor of Science or Engineering in Computer Science or a related field preferred • Other Microsoft certifications are preferred (AZ-500, SC-300, SC-400, etc.)

About Todd Tech Services: Todd Tech is a growing IT services provider based in Portland, Maine, offering managed security, cloud services, and technical support to small and mid-sized businesses. We pride ourselves on delivering responsive, hands-on support with a personal touch. We’re looking for an experienced Cloud IT Freelancer to join us on a contract basis. You’ll work directly with clients, assist with project-based implementations, and provide ongoing administrative support across Google Workspace, Microsoft 365, Intune, ABM, Ninjaone, Sentinel1, and other tools in our stack. This role also involves handling general tech support requests, everything from helping a small business configure their email routing to assisting a residential client with printer setup or device troubleshooting. If you’re comfortable juggling different types of tickets and enjoy variety in your day, this could be a great fit. Responsibilities: Perform day-to-day administration of Google Workspace and Microsoft 365 tenants, including email migrations, user and group management, policy configurations, and troubleshooting. Lead Intune/ABM deployments and device management, including configuration profiles, compliance policies, and onboarding devices. Provide client training sessions and support calls, explaining technical topics in a clear, user-friendly manner. Assist with management and troubleshooting in NinjaOne RMM, monitoring alerts, patch management, remote support tasks. Work with SentinelOne EDR for endpoint security deployments, policy adjustments, and incident response. Tackle general tech support tickets for small business and residential clients, tasks may include printer setup, basic networking issues, device troubleshooting, and app support. Collaborate with the Todd Tech team to document procedures, provide technical recommendations, and maintain high service standards. Requirements: Proven experience administering Google Workspace (email migrations, DNS, routing, security configurations). Strong knowledge of Microsoft 365 administration (Exchange Online, licensing, Teams, SharePoint, etc.). Hands-on experience with Intune MDM and ABM for Windows and MacOS environments. Comfortable leading training calls and client-facing support sessions and owning projects from start to finish. Experience with NinjaOne RMM for device monitoring, patch management, and remote support. Experience with scripting in NinjaOne with Powershell. Familiarity with SentinelOne EDR (policy management, threat remediation). A flexible, can-do attitude, willing to jump in and solve random tech support issues, whether for business clients or residential users. Ability to work independently, manage multiple priorities, and communicate clearly. Freelance/contract availability (initial scope: ~5-10 hours/week, may increase).

We need an IT expert in Google Workspace/Proofpoint/email deliverability Environment: Client is running Google Workspace (Business tier) with multiple secondary domains managed under a single Google Workspace account DNS is split across multiple providers (Wix, Bluehost, GoDaddy) No Microsoft 365 involvement What has been implemented successfully: Proofpoint Essentials Advanced+ provisioned and configured for the primary domain Domain verified in Proofpoint, mail relay active, DKIM signing active MX records updated in DNS to route inbound through Proofpoint Primary delivery destination set to ASPMX.L.GOOGLE.COM & smtp.google.com for new domain registrations SPF record updated to include both Google and Proofpoint DKIM TXT record added to DNS Inbound gateway configured in Google Workspace with full Proofpoint IP ranges Google Apps hosted service enabled under Sending Servers in Proofpoint Inbound mail filtering through Proofpoint is fully operational Where we are stuck: The outbound relay through Proofpoint is not functioning. The outbound smarthost is configured in Google Workspace pointing to outbound-us1.ppe-hosted.com port 587 with TLS. When enabled, outbound mail is rejected by Proofpoint with two alternating errors: 450 4.3.2 - Client host rejected: Try again later FAILED_PRECONDITION: read error (104): Connection reset by peer Proofpoint support has indicated this is a Google Workspace side issue. Additional complication: The Google Workspace Admin Console is throwing a "host settings update failed" error on any attempt to modify Gmail Hosts or Routing settings. This affects all Super Admin accounts on the tenant. The Outbound Gateway field remains stuck pointing to outbound-us1.ppe-hosted.com and cannot be cleared through the UI. This is believed to be a Google Admin Console backend bug specific to this tenant. Current workaround: Outbound mail is currently bypassing Proofpoint and routing directly through Google. Inbound is fully protected through Proofpoint. Client is operational but outbound encryption and DLP policies are not active. What we need: Resolve the "host settings update failed" error in Google Workspace Admin Console: likely requires Google Admin SDK API access or direct Google backend intervention Clear the stuck Outbound Gateway field Confirm and restore outbound mail flow through Proofpoint's smarthost Verify outbound encryption policies are functioning end to end Ideal candidate: Strong experience with Google Workspace Admin SDK, Gmail routing configuration, and Proofpoint Essentials in a Google Workspace environment. Google Workspace certified preferred. We are willing to work with candidate to bring client fully online with Proofpoint. This will be a collaborative effort with the candidate to ensure client services are all working as intended, with both inbound and outbound mail being able to deliver successfully through Proofpoint.

We are looking for an experienced Windows Server and Active Directory engineer to work with our team through completion of an Active Directory and server cleanup project. The environment currently has four Domain Controllers. The goal is to safely consolidate the environment down to one properly configured, healthy, and documented long-term Domain Controller. This project has already partially started. We need someone who can assess the current environment, create the remaining plan, and actively complete the work with us during scheduled screen-share sessions. This is not an advisory-only role. The selected partner will work alongside us to complete the approved changes, validate the environment, and provide final documentation. QUICK SCOPE - Review all Domain Controllers and current roles - Confirm Active Directory, DNS, DHCP, replication, SYSVOL, and FSMO health - Identify the correct long-term Domain Controller - Review Azure / Microsoft Entra user sync - Review firewall authentication, SSL VPN, LDAP, RADIUS, and SSO dependencies - Review file server, application server, backup, failover, and replication dependencies - Review the Windows Server 2012 R2 system for migration or retirement needs - Create a written plan before changes - Move roles and services as needed - Safely demote and retire unnecessary Domain Controllers - Validate all major services after each change - Document the final environment and recommendations NOTE: We already have good documentation on the above that can be verified and confirmed before migration is started. LONG-TERM OPPORTUNITY We are also looking for a dependable long-term partner for future on-premise server projects, including Active Directory, file servers, application servers, Windows Server migrations, upgrades, DNS, DHCP, Group Policy, Azure hybrid identity, firewall authentication, backup, replication, failover, and documentation. REQUIRED EXPERIENCE - Windows Server and Active Directory - Domain Controller migration, demotion, and retirement - DNS, DHCP, FSMO, SYSVOL, replication, and Group Policy - Azure AD Connect or Microsoft Entra Connect Sync - LDAP, RADIUS, SSL VPN, and SSO authentication - File servers, service accounts, failover, replication, backup, and recovery - Windows Server 2012 R2 migration planning - Clear technical documentation and change planning Experience with WatchGuard, Fortinet, SonicWall, or similar firewalls is helpful. Please include a brief example of a similar Active Directory cleanup or Domain Controller consolidation project you completed from assessment through final validation.

We are seeking an expert to set up Claude infrastructure for creating agents and integrating with various systems, including Microsoft NAV and Salesforce. The ideal candidate will have experience in AI infrastructure and system integration, ensuring seamless connectivity and functionality. This role requires a high level of expertise and the ability to work independently.

We are seeking an experienced IT professional with expertise in Microsoft 365 Enterprise to help us evaluate, configure, and implement a secure AI environment for our organization. Our goal is to leverage AI capabilities within the Microsoft ecosystem while ensuring all client materials and confidential information remain protected and are not exposed to public AI models. We are specifically interested in understanding and implementing the appropriate Microsoft 365 Enterprise (E3/E5), Microsoft Copilot, Azure OpenAI, Entra ID, Purview, and related security tools to create a secure, self-contained AI environment. Requirements: Strong experience with Microsoft 365 Enterprise administration and security Knowledge of Microsoft Copilot, Azure OpenAI, Entra ID, Microsoft Purview, and Data Loss Prevention (DLP) Experience implementing secure, enterprise-grade AI solutions Ability to configure security, governance, permissions, and access controls Familiarity with Microsoft 365 Enterprise licensing and security features Please include a brief summary of your relevant experience and any similar projects you have completed.

Microsoft Entra & UPN Migration Expert Job Title Microsoft Entra ID Expert – Domain Migration, Tenant Rename & UPN Conversion (M365 / Azure AD) Job Description We are executing a complex Microsoft 365 identity migration for a mid-size enterprise and are looking for a seasoned Microsoft Entra ID (formerly Azure AD) specialist to provide expert-level guidance, and technical oversight throughout the engagement. Most hands-on configuration will be performed by senior developers. The project involves three interconnected workstreams: • UPN suffix migration — converting all user accounts from a legacy domain (@olddomain.com) to a new primary domain (@newdomain.com), including app dependency remediation, service account handling, and mail flow validation • Identity Provider (IDP) transition — migrating from Okta as the primary IDP to Microsoft Entra ID, with Okta retained as a secondary token-passing relay during the transition period • Primary Domain/MS Tenant rename – migrating the primary Microsoft 365 domain from an old domain to a new domain. The old domain will still exist on the tenant. You will work alongside an existing internal project team and are expected to provide both advisory support and direct technical execution. Scope of Work Identity & UPN Migration • Audit and remediate all applications authenticating via the legacy UPN suffix (SAML, OAuth, OIDC, and legacy auth) • Execute bulk UPN suffix change via PowerShell / Microsoft Graph for all user accounts and applicable service accounts • Validate post-migration authentication across Microsoft 365 workloads (Exchange Online, SharePoint/OneDrive, Teams, OneNote), Okta-federated apps, and third-party SaaS applications • Advise on and assist with OneDrive URL transition, sharing link remediation strategy, and OneNote notebook reconnection • Ensure Proofpoint/mail flow continuity with new primary SMTP domain Entra ID / IDP Configuration • Configure Microsoft Entra ID as primary IDP with Okta as secondary/token-passing relay • Design and implement Conditional Access policy baseline (MFA enforcement, device compliance, location controls, sign-in risk) • Validate and remediate Workday-to-Entra attribute sync and writeback • Validate AWS, Intune, and other Entra-integrated service trust configurations post-UPN change Documentation & Knowledge Transfer • Produce or review runbooks for UPN cutover, IDP flip, and MS Tenant domain rename. • Document rollback procedures for each major phase • Provide a help desk runbook covering common post-cutover user issues (OneDrive sync, OneNote, Teams, shared links, Office Backstage) • Participate in a post-migration health check and lessons-learned review Required Qualifications • 5+ years of hands-on experience with Microsoft Entra ID / Azure Active Directory in enterprise environments • Demonstrated experience with UPN suffix migrations and/or Microsoft 365 tenant/domain renames at scale (500+ users) • Proficiency with PnP PowerShell, Microsoft Graph API, and SPO Management Shell for bulk operations • Experience with Okta-to-Entra IDP migration or Okta federation configuration • Familiarity with Workday-Entra integration (attribute mapping, writeback) is a strong plus • Experience with Windows LAPS, GPO management, and AD OU design • Excellent written English — able to produce clear technical runbooks and decision documentation Preferred Certifications (any of the following) • Microsoft Certified: Identity and Access Administrator Associate (SC-300) • Microsoft Certified: Azure Solutions Architect Expert (AZ-305) • Microsoft Certified: Security Operations Analyst Associate (SC-200) • Microsoft 365 Certified: Enterprise Administrator Expert (MS-102) Engagement Details Project type Ongoing / milestone-based Estimated duration 3–4 months Estimated hours 10–20 hours/week (flexible based on milestone cadence) Availability required Overlap with US Central time zone for weekly syncs Communication Microsoft Teams + email; weekly status call Work type Remote What to Include in Your Proposal To be considered, please address the following in your proposal: 1. Describe a comparable engagement — Detail a UPN suffix migration or IDP transition you led, including the scale (number of users), the tools/methods you used, and any complications you encountered and resolved. 2. Microsoft Tenant/Domain rename – Describe a domain migration project you worked on and lessons learned when converting the domain. 3. Okta + Entra coexistence — Have you worked in an environment where Okta and Entra ID ran simultaneously? How did you handle the token-passing configuration? 4. OneDrive/SharePoint post-UPN remediation — What is your approach to handling broken sharing links and OneNote sync issues after a bulk UPN change? 5. Your hourly rate and estimated availability over the next 90 days. Applications that do not address the proposal questions above will not be reviewed.

We're a small Central Florida nonprofit foundation consolidating fully into Google Workspace and moving off our current outside IT provider. We have an in-house Google Workspace admin who will architect the plan and oversee the work — we're looking for a specialist to execute the migration cleanly and with minimal downtime. Scope: - Migrate email/mailboxes from our current provider into Google Workspace (Gmail) - DNS cutover: MX, SPF, DKIM, DMARC, plus any A/CNAME/TXT records - User provisioning and account setup - Migrate and verify mail, contacts, calendars, and Drive data as needed - Domain configuration and verification - Brief documentation of what was done About you: - Proven Google Workspace migration track record (small-business or nonprofit experience a plus) - Strong on email deliverability (SPF/DKIM/DMARC) and DNS - Comfortable working under the direction of our in-house Workspace admin - Clear, responsive communicator This is a bounded project to start, with potential for occasional ongoing support afterward. When you apply, please tell me: 1. Roughly how many Google Workspace migrations you've done, and the largest. 2. Your process for an email cutover with minimal downtime. 3. Whether you're comfortable working under the direction of our in-house Workspace admin.

We need a networking specialist to connect our computers and software so everything runs smoothly across the warehouse. The role includes setting up the network, ensuring reliable connectivity, and integrating systems for seamless operation. This is a basic project for someone who can handle the entire setup and make sure everything works together efficiently.