Hybrid Endpoint Security Administrator (Intune)

Stratus®; Boston (MA); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Flexible hybrid work

Health, dental, and vision insurance

401k with company match

Company-paid life insurance

Paid holidays and PTO

Job summary

Stratus, a leading integrated engineering and design firm, seeks a Security Systems Administrator to own endpoint management and cybersecurity across our enterprise. You will deploy and maintain Microsoft Intune, Windows Autopilot, Defender for Endpoint, and Entra ID while guiding security configurations across offices and acquisitions.

Join a collaborative team and help drive scalable security standards, audits, and incident response.

Qualifications

• 5+ years of enterprise endpoint management experience.
• Experience managing Windows endpoints at scale with Intune.
• Experience with Windows Autopilot and Windows Update for Business.
• Strong troubleshooting and documentation skills.
• Ability to translate security requirements into technical controls.

Responsibilities

• Manage Microsoft Intune configuration profiles and policies.
• Oversee Windows Autopilot enrollment and lifecycle.
• Package and deploy applications via Intune and monitor deployments.
• Administer Windows Update for Business and patching.
• Monitor enrollment, deployments, and compliance; troubleshoot issues.
• Develop and improve endpoint security configurations using Defender for Endpoint and policy baselines.
• Support Entra ID and Conditional Access, MFA remediation.
• Document runbooks, standards, and exceptions.
• Collaborate with IT leadership and auditors to strengthen security standards.

Skills

Intune

PowerShell

Endpoint security

Cybersecurity

Collaboration

Tools

Intune

Windows Autopilot

Defender for Endpoint

Entra ID

Windows Update for Business

Job description

Stratus, a leading integrated engineering and design firm, seeks a Security Systems Administrator to own endpoint management and cybersecurity across our enterprise. You will deploy and maintain Microsoft Intune, Windows Autopilot, Defender for Endpoint, and Entra ID while guiding security configurations across offices and acquisitions.

Join a collaborative team and help drive scalable security standards, audits, and incident response.