IT Systems Administrator

Stratus®

. Administer Microsoft Entra ID and Microsoft 365 users, groups, licensing, conditional access, and MFA policies .

Posted 9/15/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in administering Microsoft Entra ID and Microsoft 365, with a strong focus on user management, access provisioning, and compliance. Proficient in automating IT processes and managing endpoint devices while supporting security audits and maintaining documentation.

Highest-signal resume keywords

Microsoft Entra ID AdministrationMicrosoft 365 AdministrationEndpoint ManagementScripting with PowerShellSOC 2 Compliance Support

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

MDMSAML IntegrationAccess ProvisioningDevice Compliance PoliciesAutomation ScriptingLicense ReconciliationSecurity Policy DocumentationAI Tooling OperationsRunbook CreationConfiguration Management

Soft Skills

Strong Written CommunicationService OrientationSound Judgment

Tools & Technologies

RipplingJamfKandjiGoogle WorkspaceKeeperVantaTerraformGitHubClaude CodeCursor

Industry Keywords

NIST 800-171SOC 2ISO 27001CMMCCompliance ProgramIT Systems AdministrationDistributed WorkforcePassword ManagerEndpoint Management PlatformInternal Automation

Tech Stack

Tools & technologies

AzureJamfKubernetesPythonTerraform

About the role

Key responsibilities & impact

Administer Microsoft Entra ID and Microsoft 365 users, groups, licensing, conditional access, and MFA policies
Own SSO and SAML/OIDC integrations across the federated SaaS estate and onboard new applications
Conduct periodic access reviews, least-privilege cleanup, and produce review evidence
Support domain changes, directory migrations, and platform consolidation
Manage the Rippling device fleet, including enrollment, configuration, compliance policies, patching, and encryption baselines
Own hardware procurement, imaging, shipping, refresh, secure retirement, and asset inventory
Maintain accurate inventories of devices, software, and SaaS licenses
Own end-to-end employee onboarding and offboarding, driving same-day provisioning and deprovisioning
Serve as escalation point for employee IT requests involving accounts, access, devices, connectivity, and conferencing
Administer company-wide SaaS provisioning, deprovisioning, license reconciliation, and vendor/renewal coordination
Automate recurring IT work such as scripted provisioning, license reconciliation, access reporting, and compliance evidence collection
Use Claude Code and Cursor as daily AI tooling and create human- and agent-executable runbooks
Support company-wide AI tooling operations, including seat and license management and access provisioning
Support SOC 2 and NIST 800-171 audits, including evidence collection, auditor responses, remediation tracking, and IT-side controls
Administer Vanta and maintain integrations with identity, device, and ticketing systems
Track security awareness training, policy acknowledgements, e-signatures, and access review attestations
Maintain IT and security policy documentation
Administer Keeper and enforce credential hygiene
Support internal network and remote access infrastructure, including the SAML-integrated VPN
Create and maintain runbooks, knowledge base articles, and self-service documentation

Requirements

What you’ll need

3-5 years of hands-on IT systems administration experience supporting a distributed workforce
Demonstrated production experience administering Microsoft Entra ID (Azure AD) and Microsoft 365; this is a hard requirement
Hands-on experience with MDM / endpoint management at company scale, including enrollment, compliance policy, and configuration baselines
Experience with Rippling, Jamf, Kandji, or a comparable endpoint management platform
Practical experience configuring SSO/SAML application integrations and troubleshooting federation failures
Experience owning employee onboarding and offboarding, including access provisioning and deprovisioning
Scripting ability sufficient to automate real work using PowerShell, Bash, or Python
Experience supporting a security audit or compliance program, including collecting evidence, responding to auditor requests, and maintaining control documentation
Strong written communication and technical writing skills; ability to produce usable documentation
Genuine enthusiasm for using AI tooling in operations work and aptitude to learn it quickly
Service orientation and sound judgment about urgency
A degree is welcome but experience is what we are evaluating
Google Workspace administration experience preferred
Direct experience administering Rippling or another HRIS used as the provisioning source of truth preferred
Direct experience with SOC 2, NIST 800-171, NIST 800-53, CMMC, ISO 27001, Vanta, Drata, or Apptega preferred
Experience with Terraform/OpenTofu or configuration management preferred
Familiarity with GitHub and GitHub Actions, including organization and access administration preferred
Experience administering a password manager or secrets platform at company scale preferred
Exposure to Azure, Kubernetes, or a platform engineering environment preferred
Prior experience building internal automations, integrations, or agents preferred
Background in construction, MEP, manufacturing, or another non-software-native industry preferred
Eligibility to work in the U.S.; E-Verify verification occurs post-hire

Benefits

Comp & perks

Comprehensive and competitive health benefits plan
Matching 401k contributions
20 days annual PTO
Primarily remote work with occasional annual team onsites