Lead Application Administrator; SaaS & Enterprise

For years,
Stream Data Centers has been a trusted partner in providing world‑class data center solutions. With a focus on sustainable, secure, and reliable infrastructure, Stream empowers businesses to scale their digital operations while prioritizing environmental and social responsibility.

Stream Data Centers continues to set new standards for innovation, operational excellence, and sustainability in the data center industry, having provided premium data center services since 1999. Now, with 90% of its inventory leased to Fortune 100 customers, the company has acquired, developed and managed more than 27 data center projects nationally, while leadership has remained consistent for over two decades.

From site selection to data center construction and operations, Stream develops wholesale colocation capacity and build‑to‑suit facilities for hyperscale and enterprise users in major markets across the United States. Additionally, Stream sources and develops low‑risk land sites for optimum data center development and provides energy procurement services with a focus on reducing market risk and providing low‑cost renewable energy options.

Stream’s IT team delivers modern, secure technology solutions that power our global operations. We combine proactive management, rigorous cybersecurity, and agile software development to drive business growth. By aligning technology strategy with business goals, we keep Stream at the forefront of innovation and operational excellence.

The Application Administrator (SaaS & Enterprise Applications) serves as the lead for Stream’s application administration function and is responsible for the day‑to‑day administration, availability, configuration, and lifecycle management of Stream’s SaaS application portfolio, as well as enterprise application deployment and compliance on corporate‑managed endpoints via Microsoft Intune. This role ensures applications are reliable, secure, and aligned to business needs through disciplined access management, configuration standards, vendor coordination, endpoint deployment standards, and operational support.

You will work closely with—and take technical direction from—the Entra  (IAM SME) for identity standards, SSO/MFA patterns, provisioning approaches, and access governance requirements.

You will partner closely with Cybersecurity, Infrastructure, and business stakeholders to implement and validate security controls (e.g., SSO/MFA, RBAC, logging, data retention), maintain audit‑ready evidence, and drive timely remediation of application risks. Over time, this role will expand to assume IT operational ownership for the application‑layer portions of select on‑premises and data center–hosted solutions, ensuring consistent standards across SaaS and on‑prem environments.

• Administer SaaS applications (Day‑2 operations): configure, maintain, and support Stream’s SaaS platforms, including tenant settings, integrations, environments, and ongoing operational health.
• Endpoint application deployment (Microsoft Intune): package, deploy, update, and retire applications using Intune; manage assignment groups and deployment rings; validate installs and remediation steps across Windows/macOS endpoints as applicable.
• Device & application compliance enforcement: partner with Security and Endpoint teams to implement and maintain Intune compliance policies and endpoint application baselines; investigate non‑compliance and drive timely remediation aligned to policy and audit expectations.
• Troubleshoot complex deployment and policy issues: diagnose application install failures, detection‑rule issues, policy conflicts, and access problems; coordinate fixes with endpoint engineering, IAM, and vendors; document root cause and preventive actions.
• Application ownership model and governance: ensure every application has two owners—IT and the business. Define and maintain RACI, support boundaries, escalation paths, and operational standards for each application.
• Identity, access, and roles (RBAC): administer user provisioning/deprovisioning, role assignments, group mappings, and privileged access…