Security and Systems Administrator (Microsoft Intune)

Location: Atlanta, GA, US; flexible hybrid work is supported, with additional US locations and remote US work listed.

Salary: $122,000–$149,000 annually.

Company

Stratus is a multidisciplinary engineering, architecture, interior design, and consulting firm serving public- and private-sector clients across civic, commercial, industrial, transportation, education, water resources, and government projects.

What you will do

• Administer Microsoft Intune, including configuration profiles, compliance policies, security baselines, enrollment restrictions, role-based access, and endpoint controls.
• Manage Windows Autopilot, device enrollment, provisioning, application packaging and deployment, Windows Update for Business, patching, and endpoint lifecycle processes.
• Implement and improve endpoint security using Microsoft Defender for Endpoint, encryption, firewalls, attack surface reduction, Conditional Access, device identity, and MFA remediation.
• Translate cybersecurity, business, regulatory, and framework requirements into technical controls, testing criteria, implementation plans, and operating procedures.
• Support audits, assessments, evidence collection, compliance validation, risk remediation, investigations, and incident response.
• Use PowerShell for automation and reporting, document endpoint standards and runbooks, and collaborate with IT leadership, infrastructure, Service Desk, auditors, vendors, and security partners.

Requirements

• 5+ years of progressive experience in enterprise endpoint management, endpoint engineering, systems administration, cybersecurity, or a related area, with the ability to independently own an enterprise technology platform.
• Hands-on production experience managing Windows endpoints at scale through Microsoft Intune, including configuration profiles, compliance policies, security baselines, Windows Autopilot, enrollment, and provisioning.
• Experience packaging, testing, and deploying applications through Intune, including detection and requirement rules, dependencies, deployment monitoring, and remediation.
• Experience administering Windows Update for Business, including update rings, patch compliance, pilot and production deployments, and remediation workflows.
• Working knowledge of Microsoft Defender for Endpoint, Microsoft Entra ID, Conditional Access, device identity, and MFA.
• Proficiency with PowerShell for endpoint administration, automation, reporting, and remediation.
• Experience supporting cybersecurity controls, audits, compliance validation, risk remediation, or related security program activities.
• Strong troubleshooting, analytical, prioritization, documentation, communication, and cross-functional collaboration skills, including communication with technical and non-technical stakeholders.

Nice to have

• Experience supporting 1,000+ users or devices in a multi-office or multi-entity organization.
• Experience with acquisition integration, endpoint platform migrations, or technology standardization across acquired organizations.
• Experience in architecture, engineering, construction, professional services, or another application-intensive environment.
• Experience with Defender Vulnerability Management, MDM/MAM, or certificate-based endpoint authentication.
• Knowledge of NIST, CMMC, CIS, or comparable cybersecurity frameworks and ITSM practices.
• Experience developing endpoint security, compliance, or operational reporting and dashboards.
• Microsoft Endpoint Administrator Associate, Identity and Access Administrator Associate, CompTIA Security+, or similar certification.

Culture & Benefits

• Team-oriented environment emphasizing transparency, creativity, and shared success.
• Career paths, leadership opportunities, specialization, and learning and development support.
• Flexible hybrid work model.
• Medical, dental, and vision insurance; company-paid life and disability insurance.
• 401(k) retirement plan with employer match, paid holidays, and competitive PTO.