IT Platform Manager

Clear Creek Systems Inc•Clarksville, TN

1d•$125,000 - $160,000•Remote

About The Position

We are seeking a hands-on IT Manager to own and operate our Microsoft 365 ecosystem across four tenants supporting approximately 100–200 users. This individual will be responsible for day-to-day administration, endpoint and mobile device lifecycle management, and continuous improvement of security and device management platforms including Entra ID, Intune, and Microsoft Defender. This role combines operational execution with strategic development. The IT Manager will partner closely with the CIO to evolve the organization’s IT roadmap, strengthen security posture over time, and standardize processes across business units. The role spans full ownership of identity, endpoint, and mobile device integration within a unified security model.

Requirements

5+ years of experience in Microsoft 365 administration
Strong hands-on experience with Entra ID (Azure AD)
Strong hands-on experience with Microsoft Intune (Windows, iOS, Android device management)
Strong hands-on experience with Microsoft Defender security stack
Experience managing endpoint and mobile device ecosystems in a cloud-managed environment
Strong understanding of identity-driven security and Conditional Access
Ability to operate independently in a broad, all-in-one IT role

Nice To Haves

Experience managing multi-tenant Microsoft 365 environments
Knowledge of Zero Trust security principles and implementation
Experience with Apple Business Manager and Android Enterprise
PowerShell scripting or automation experience
Experience integrating device compliance with identity-based access controls

Responsibilities

Administer and maintain Microsoft 365 services across four tenants
Manage Entra ID (Azure AD), including user lifecycle, Conditional Access policies, MFA enforcement, and group design/RBAC
Integrate identity with endpoint and mobile device compliance to enforce secure access (Zero Trust model)
Oversee Exchange Online, Teams, SharePoint, and OneDrive administration
Ensure tenant configuration consistency where appropriate while supporting business-specific needs
Own Microsoft Intune configuration and operations across Windows, iOS, and Android devices, including device enrollment, configuration profiles, compliance policies, security baselines, and application deployment/updates/patching
Continuously enhance endpoint security posture
Manage full device lifecycle: procurement, provisioning, deployment, maintenance, diagnostics, repair coordination, repurposing, secure decommissioning, and disposal
Manage corporate mobile ecosystem (iOS and Android phones and tablets) using Intune and integrated identity controls
Configure and maintain MDM and MAM, app protection policies, and compliance policies tied to Conditional Access
Integrate mobile device posture with Entra ID for secure access to M365 resources
Coordinate carrier relationships, device procurement, upgrades, and lifecycle planning
Support secure and reliable mobile access to email, Teams, and business applications
Administer Microsoft Defender suite (Endpoint, Office 365, Identity, and Cloud Apps as applicable)
Monitor alerts and respond to security incidents across endpoints, identities, and email
Correlate signals between Defender and Entra ID
Tune policies over time to balance usability and protection
Improve visibility, reporting, and response workflows across tenants
Support implementation and enforcement of email security standards (SPF, DKIM, DMARC)
Serve as escalation point for technical issues across laptops, mobile devices, and M365 services
Provide hands-on support for Windows endpoints, iOS/Android phones and tablets, and identity/access issues
Maintain and improve IT documentation, standards, and operational procedures
Ensure a consistent, secure, and high-quality user experience across all business units
Arrange support relationships for branch infrastructure (routers, printers, and phones)
Partner with CIO to execute IT strategy and roadmap across identity, device, and security domains
Identify opportunities to improve security posture, automation and efficiency, user onboarding/offboarding processes, and standardization of policies
Evolve the environment toward modern best practices: Zero Trust architecture, device-based access enforcement, and unified endpoint and identity security model