Position Summary:
The Cloud and SaaS Administrator is responsible for the administration, security, documentation, integration, and lifecycle management of the organization's cloud and Software-as-a-Service environment. This role maintains a complete map of SaaS applications, owners, users, licenses, data locations, authentication methods, integrations, dependencies, and connections across the organization.
The position provides hands-on administration for Microsoft 365, AWS, SaaS-based data storage platforms, identity and access integrations, and other cloud services. Success requires strong technical judgment, careful documentation, security awareness, vendor coordination, and the ability to translate business needs into reliable, governed, and cost-effective cloud services.
Essential Responsibilities:
- SaaS Portfolio Mapping and Governance
- Create and maintain a complete inventory and relationship map of approved SaaS applications, cloud services, data platforms, integrations, APIs, service accounts, data flows, and technical dependencies.
- Document each application's business owner, technical owner, vendor, purpose, users, license quantities, cost center, contract and renewal dates, authentication method, data classification, and support contacts.
- Identify unsanctioned, duplicate, underused, obsolete, or high-risk SaaS services and coordinate appropriate remediation, consolidation, or retirement.
- Maintain standards for SaaS intake, technical review, security review, implementation, ownership, documentation, renewal, and decommissioning.
- Partner with business units and other technology team members to understand application usage, connections, operational importance, and future requirements.
- Microsoft 365 Administration
- Administer Microsoft 365 services, including Exchange Online, Teams, SharePoint Online, OneDrive, Microsoft 365 Groups, Entra ID integrations, and related administrative portals.
- Manage tenant settings, domains, mail flow, distribution and shared mailboxes, collaboration settings, external sharing, retention-related configurations, and service health.
- Support user provisioning, licensing, group membership, role assignments, application access, and account changes in coordination with identity and support processes.
- Monitor Microsoft 365 service advisories, incidents, usage, storage, security recommendations, and administrative alerts, and coordinate response when required.
- Maintain documentation for tenant configurations, administrative roles, dependencies, integrations, support procedures, and recovery requirements.
- AWS Environment Administration
- Administer and support the organization's AWS environment, accounts, organizational structure, IAM roles and policies, resource inventories, budgets, alerts, and operational standards.
- Maintain visibility into AWS services, owners, workloads, network connections, data stores, logging, backups, dependencies, and third-party integrations.
- Apply least-privilege access, account separation, tagging, logging, encryption, monitoring, backup, and lifecycle-management standards.
- Monitor resource health, availability, capacity, cost, security findings, and configuration changes, escalating or remediating issues as appropriate.
- Coordinate with developers, data teams, vendors, managed service providers, and other technology team members on cloud deployments and operational support.
- Identity, Access, and Application Integration
- Administer SaaS identity and access integrations, including single sign-on, SAML, OAuth, OpenID Connect, SCIM provisioning, multifactor authentication, and role-based access.
- Map and maintain application connections to Microsoft Entra ID and other identity, security, data, automation, and collaboration services.
- Review privileged roles, service accounts, API credentials, application registrations, consent grants, external access, and inactive accounts on a recurring basis.
- Coordinate joiner, mover, and leaver processes so access is provisioned, changed, and removed accurately and promptly.
- Troubleshoot authentication, provisioning, permission, integration, API, synchronization, and application-access issues.
- Cloud Data Storage and Protection
- Administer and maintain visibility into data stored in Microsoft 365, AWS, and other SaaS-based storage, file-sharing, backup, database, and data-platform services.
- Document data owners, locations, classifications, access permissions, retention requirements, integrations, backup coverage, recovery expectations, and transfer paths.
- Apply appropriate access, sharing, encryption, retention, deletion, backup, recovery, and data-loss prevention controls in partnership with security, legal, and business stakeholders.
- Monitor storage utilization, external sharing, stale data, public links, unusual access, synchronization issues, and capacity trends.
- Coordinate backup and recovery testing for critical SaaS and cloud data and maintain documented recovery procedures.
- Security, Compliance, and Risk Management
- Apply cloud and SaaS security standards based on least privilege, multifactor authentication, Zero Trust principles, secure configuration, logging, monitoring, and controlled external access.
- Review security alerts, audit logs, risky sign-ins, administrative activity, application consent, configuration drift, and vendor advisories.
- Partner with other technology team members to remediate vulnerabilities, excessive permissions, unsupported integrations, exposed data, and configuration risks.
- Support audits, compliance reviews, legal holds, eDiscovery, records requests, access reviews, and evidence collection as assigned.
- Maintain current documentation of controls, exceptions, risks, remediation activities, and responsible owners.
- Monitoring, Support, and Incident Response
- Monitor cloud and SaaS service health, availability, performance, capacity, license consumption, integration status, and administrative alerts.
- Serve as an escalation resource for complex Microsoft 365, AWS, SaaS, data-storage, identity, access, and integration issues.
- Coordinate vendor support cases and internal response during outages, service degradation, security incidents, and data-access problems.
- Perform root-cause analysis, document findings, communicate status, and implement corrective and preventive actions.
- Plan, test, document, communicate, and execute cloud and SaaS changes through established change-management practices.
- Licensing, Vendors, Cost, and Lifecycle Management
- Track SaaS and cloud licenses, editions, assignments, consumption, storage, support plans, renewals, and usage to improve cost efficiency and avoid service interruption.
- Identify unused licenses, duplicate capabilities, unnecessary resources, unfavorable configurations, and opportunities for consolidation or cost optimization.
- Support vendor evaluations, technical demonstrations, implementation planning, renewals, contract reviews, invoice validation, and service escalations.
- Coordinate application onboarding, configuration, testing, migration, adoption, ownership transfer, and secure decommissioning.
- Maintain administrative runbooks, architecture and data-flow diagrams, configuration records, recovery procedures, and knowledge articles.
Required Qualifications
- Education and Experience
- Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related field, or equivalent relevant professional experience.
- Demonstrated experience administering Microsoft 365 and supporting cloud or SaaS platforms in a business environment.
- Hands-on experience with identity, access, application integrations, cloud data, technical documentation, troubleshooting, and vendor support.
- Knowledge and Skills
- Strong working knowledge of Microsoft 365 administration, including Exchange Online, Teams, SharePoint Online, OneDrive, Microsoft 365 Groups, and related service-management portals.
- Working knowledge of AWS accounts, IAM, resource administration, logging, monitoring, storage, backup, tagging, security, and cost-management concepts.
- Understanding of SaaS architecture, application inventories, APIs, integrations, dependencies, data flows, service accounts, and lifecycle governance.
- Knowledge of Microsoft Entra ID, single sign-on, SAML, OAuth, OpenID Connect, SCIM, multifactor authentication, role-based access, and least-privilege principles.
- Knowledge of cloud and SaaS data-storage permissions, sharing, retention, backup, recovery, encryption, auditing, and data-protection practices.
- Ability to analyze logs, alerts, service health, authentication failures, synchronization issues, permissions, and application configuration problems.
- Strong documentation, organization, project coordination, vendor-management, communication, prioritization, and customer-service skills.
Job Type: Full-Time
The Dallas Mavericks provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.