We are a boutique healthcare M&A advisory firm handling highly confidential deal data. We require a Microsoft-certified partner to finalize our Microsoft 365 environment, stabilize DNS/mail flow, configure security controls, ensure domain authentication, and complete Apple device management.
This is a targeted engagement for a small team (3 users).
Current Environment
Microsoft 365 tenant active
Primary domain:
Secondary domain:
GoDaddy manages DNS
Zoho One (CRM & WorkDrive) in use
Apple Business Manager in place
Contractor Mac enrollment failure
Outlook sync errors following migration
Intake form moving to Vercel subdomain
Scope of Work
1. Microsoft 365 Domain Stabilization & Authentication (Critical)
Verify domain health
Confirm domain verification status in Microsoft
Configure and validate:
SPF
DKIM signing
DMARC policy
Ensure domain authentication is fully enabled in Microsoft admin
Confirm email deliverability & reputation
2. DKIM & Email Authentication Setup (Required)
Enable DKIM signing for
Publish required CNAME records in GoDaddy
Verify DKIM status in Microsoft
Configure recommended DMARC policy (monitor mode initially)
Validate alignment using external test tools
3. Behavioral Blueprints Mailbox Verification
Verify mailboxes and alias boxes are functioning
Validate inbound/outbound mail flow
Ensure authentication & deliverability
4. DNS Audit & Cleanup (GoDaddy)
Audit MX, SPF, DKIM, Autodiscover, TXT records
Remove conflicting legacy records
Ensure no split routing exists
Document DNS configuration
5. Email Flow Testing & Validation
Test inbound/outbound mail across domains
Validate delivery to external providers (Gmail, etc.)
Confirm Outlook sync stability
Verify DKIM & SPF pass in message headers
Provide checklist for ongoing monitoring
6. Outlook Sync Error Resolution
Resolve sync errors caused by migration
Repair mailbox profile issues
Confirm stable Outlook operation on macOS
7. Microsoft 365 Security Hardening (M&A Baseline)
Implement required security posture:
Enforce MFA for all users
Configure Conditional Access for admins
Block legacy authentication
Prevent external auto-forwarding
Enable Defender anti-phishing protections
Confirm DKIM & DMARC enforcement
Verify encryption in transit (TLS)
8. Intune / Endpoint Manager Setup (macOS)
Configure macOS compliance policies:
FileVault encryption
password requirements
screen lock
Define policy for contractor devices
Provide BYOD guidance
9. Apple Business Manager Setup & Enrollment Fix
Verify ABM integration with Intune
Fix Mac enrollment failure
Configure screen sharing permissions
Document enrollment process
10. Cloudflare Zero Trust Advisory
Provide guidance on:
Zero Trust admin access
DNS security
secure Zoho CRM access
whether implementation is appropriate
11. Microsoft Purview / DLP Roadmap (Advisory)
Provide phased roadmap for:
forwarding restrictions
basic DLP for financial data
sensitivity labeling for deal documents
Deliverables
Stable mail flow across domains
DKIM, SPF, DMARC correctly configured
Domain authentication verified
Outlook sync issues resolved
DNS conflicts eliminated
Intune macOS policies configured
Apple Business Manager operational
Intake subdomain verified on Vercel
Zoho CRM intake tested & validated
Written documentation for:
DNS & mail best practices
user setup
device enrollment
M&A security practices
Ideal Candidate
Microsoft Certified (MS-102, MD-102)
DNS & email authentication experience
Intune & Apple Business Manager expertise
Experience with confidential data environments
Budget & Time
Expected: 4–8 hours
Contract duration of 1 to 3 months.
Mandatory skills: Office 365, Microsoft Active Directory, Windows Server, Microsoft Exchange Server, Network Administration, System Configuration