Systems Administrator - Microsoft 365 & Intune

Bennett Thrasher; Atlanta (GA); On-site; USD 85,000 - 120,000; Full time

Job summary

Bennett Thrasher is seeking a Systems Administrator to own and improve our Microsoft 365 and Intune environment, ensuring identity, device, application, and collaboration services run securely and reliably across the firm.

You will implement Intune and related security policies across a complex multi‑subsidiary environment, support onboarding/offboarding, and coordinate with internal teams to meet audit, patching, and change-management requirements, while developing runbooks.

Qualifications

• 3–5+ years administering Microsoft 365 and Intune in a business environment.
• Strong working knowledge of Active Directory, Entra ID, conditional access, multifactor authentication, and single sign‑on using SAML or OIDC.
• Experience managing Intune MDM/MAM, device compliance, Windows Autopilot, and cross‑platform endpoint management.
• Experience with application packaging and deployment, including Win32 apps, MSI packages, and Intune‑based deployment methods.
• Comfort using PowerShell scripting for administration, troubleshooting, and automation.
• Ability to document configurations, standards, processes, and support procedures clearly.
• Strong communication skills with technical and non‑technical colleagues, support teams, and external providers.

Responsibilities

• Administer Microsoft 365 services, including Entra ID, Exchange Online, Teams, SharePoint, and OneDrive.
• Support enterprise users through onboarding and offboarding, license assignment, role‑based access control, mailbox delegation, and shared mailbox administration.
• Configure and troubleshoot Exchange Online mail flow, message trace, transport rules, and access issues.
• Implement and manage Microsoft Intune for Windows, iOS, and Android devices, including secure BYOD and corporate device management.
• Manage device enrollment, imaging, configuration profiles, compliance policies, security baselines, and Windows Autopilot provisioning.
• Package, test, deploy, and maintain applications through Intune, including Win32, line‑of‑business, and Microsoft Store apps.
• Configure and maintain single sign‑on, multifactor authentication, conditional access, and related identity security controls.
• Support audit and compliance requirements by owning patching, security baseline maintenance, vulnerability remediation, escalations, and issue resolution.
• Contribute to the maintenance of virtual servers and support broader infrastructure needs as assigned.
• Manage phased production deployments, including pilot testing, monitoring, issue remediation, rollback planning, and change management.
• Develop design, implementation, support, operational documentation, standards, and runbooks.
• Facilitate knowledge transfer to the support team and assist the Service Desk with escalated Microsoft 365 and device issues.

Skills

Microsoft 365

Intune

Active Directory

Entra ID

Conditional Access

MFA

SSO

PowerShell

Documentation

Communication

Tools

NinjaOne

MSI packaging

Job description

Bennett Thrasher is looking for a Systems Administrator to own and continuously improve our Microsoft 365 and Intune environment. This role ensures identity, device, application, and collaboration services run securely and reliably across the firm.

The administrator will implement, administer, and maintain Intune and related Microsoft 365 security policies across a complex, multi‑subsidiary environment while partnering with Corporate IT to align the tenant with security best practices.

This position also contributes to departmental projects, provides second-tier support and training for technology-related issues, and coordinates with internal teams, service providers, security partners, and the Service Desk as needed.

What You’ll Do

• Administer Microsoft 365 services, including Entra ID, Exchange Online, Teams, SharePoint, and OneDrive.


• Support enterprise users through onboarding and offboarding, license assignment, role‑based access control, mailbox delegation, and shared mailbox administration.


• Configure and troubleshoot Exchange Online mail flow, message trace, transport rules, and access issues.


• Implement and manage Microsoft Intune for Windows, iOS, and Android devices, including secure BYOD and corporate device management.


• Manage device enrollment, imaging, configuration profiles, compliance policies, security baselines, and Windows Autopilot provisioning.


• Package, test, deploy, and maintain applications through Intune, including Win32, line‑of‑business, and Microsoft Store apps.


• Configure and maintain single sign‑on, multifactor authentication, conditional access, and related identity security controls.


• Support audit and compliance requirements by owning patching, security baseline maintenance, vulnerability remediation, escalations, and issue resolution.


• Contribute to the maintenance of virtual servers and support broader infrastructure needs as assigned.


• Manage phased production deployments, including pilot testing, monitoring, issue remediation, rollback planning, and change management.


• Develop design, implementation, support, operational documentation, standards, and runbooks.


• Facilitate knowledge transfer to the support team and assist the Service Desk with escalated Microsoft 365 and device issues.

What You Bring

• 3–5+ years of experience administering Microsoft 365 and Intune in a business environment.


• Strong working knowledge of Active Directory, Entra ID, conditional access, multifactor authentication, and single sign‑on using SAML or OIDC.


• Experience managing Intune MDM/MAM, device compliance, Windows Autopilot, and cross‑platform endpoint management.


• Experience with application packaging and deployment, including Win32 apps, MSI packages, and Intune‑based deployment methods.


• Comfort using PowerShell scripting for administration, troubleshooting, and automation.


• Ability to document configurations, standards, processes, and support procedures clearly.


• Strong communication skills with technical and non‑technical colleagues, support teams, and external providers.

Nice to have

• Microsoft certifications such as MD-102, MS-102, or SC-300.


• Experience with an RMM platform such as NinjaOne.


• Experience in professional services, accounting, or another regulated industry.


• Experience working alongside an MSP or MDR provider.