Lead Application Administrator; SaaS & Enterprise

Application Administrator (Saas & Enterprise Applications)

Stream's IT team delivers modern, secure technology solutions that power our global operations. We combine proactive management, rigorous cybersecurity, and agile software development to drive business growth. By aligning technology strategy with business goals, we keep Stream at the forefront of innovation and operational excellence.

The Application Administrator (SaaS & Enterprise Applications) serves as the lead for Stream's application administration function and is responsible for the day-to-day administration, availability, configuration, and lifecycle management of Stream's SaaS application portfolio, as well as enterprise application deployment and compliance on corporate-managed endpoints via Microsoft Intune. This role ensures applications are reliable, secure, and aligned to business needs through disciplined access management, configuration standards, vendor coordination, endpoint deployment standards, and operational support.

You will partner closely with Cybersecurity, Infrastructure, and business stakeholders to implement and validate security controls (e.g., SSO/MFA, RBAC, logging, data retention), maintain audit-ready evidence, and drive timely remediation of application risks. Over time, this role will expand to assume IT operational ownership for the application-layer portions of select on-premises and data center–hosted solutions, ensuring consistent standards across SaaS and on-prem environments.

Key Responsibilities:

• Administer SaaS applications (Day-2 operations):
  Configure, maintain, and support Stream's SaaS platforms, including tenant settings, integrations, environments, and ongoing operational health.
• Endpoint application deployment (Microsoft Intune):
  Package, deploy, update, and retire applications using Intune; manage assignment groups and deployment rings; validate installs and remediation steps across Windows/macOS endpoints as applicable.
• Device & application compliance enforcement:
  Partner with Security and Endpoint teams to implement and maintain Intune compliance policies and endpoint application baselines; investigate non-compliance and drive timely remediation aligned to policy and audit expectations.
• Troubleshoot complex deployment and policy issues:
  Diagnose application install failures, detection-rule issues, policy conflicts, and access problems; coordinate fixes with endpoint engineering, IAM, and vendors; document root cause and preventive actions.
• Application ownership model and governance:
  Ensure every application has two owners—IT and the business. Define and maintain RACI, support boundaries, escalation paths, and operational standards for each application.
• Identity, access, and roles (RBAC):
  Administer user provisioning/deprovisioning, role assignments, group mappings, and privileged access workflows; perform periodic access reviews with business owners and enforce least privilege.
• SSO/MFA and directory integrations:
  Implement and maintain SSO, MFA, SCIM/provisioning, and directory integrations (e.g., Entra /AD), ensuring reliable authentication and secure access patterns.
• Coordinate with IAM on identity changes:
  Follow IAM-defined standards for SSO/MFA, SCIM provisioning, group/role mappings, and conditional access; coordinate application onboarding and material configuration changes impacting authentication/authorization with the Entra  (IAM SME).
• Security configuration and control validation:
  Partner with Cybersecurity to configure application security controls (conditional access, session controls, logging, retention, DLP settings where applicable) and provide evidence for audits and assessments.
• Monitoring, incident response, and vendor coordination:
  Monitor application availability and key integrations; respond to incidents, coordinate triage with vendors and internal teams, and drive root-cause analysis and preventive actions.
• Configuration management and standardization:
  Maintain baseline configurations, document standards, and reduce drift across tenants/environments; leverage automation and scripting to streamline administration and reduce manual effort.
• Change management and release coordination:
  Manage application changes, upgrades, and release impacts; create implementation/rollback plans, communicate outages, and validate post-change outcomes with stakeholders.
• Data, retention, and compliance alignment:
  Help define and administer application settings that support compliance requirements (retention, legal hold support where applicable, data residency, and audit logging) in partnership with Security and Legal/Compliance.
• Application lifecycle and portfolio hygiene:
  Maintain application inventory/CMDB records, contracts/renewal calendar inputs, ownership metadata, and decommissioning plans; ensure orphaned apps are identified and remediated.
• On-premises and data center application transition (future scope):
  As assigned, assume IT operational ownership for the application-layer components of select…