Apple Platform Engineer

TEKSYSTEMS INC.

Quantico, VA, United States

24 days ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

7 years minimum

Working hours

Regular working hours

Job source

www.clearancejobs.com

Tech stack

IEEE 802.1X Microsoft Windows Active Directory Apple IOS Apple Mac Systems Bash Shell Configuration Management Cyber Security Linux Federal Information Processing Standards (FIPS) ICloud Identity and Access Management

+21 more

Virtual Private Networks (VPN) Python (Programming Language) Lightweight Directory Access Protocols (LDAP) Networking Basics OAuth Public Key Infrastructure Windows PowerShell Zero Trust Network Access Security Assertion Markup Language (SAML) Systems Integration Wi-Fi Technology Software Distribution Okta Swift (Programming Language) Tanium Platform Expertise Falcon Platform Patch Management Casper Suite CIS Benchmarks Splunk Vulnerability Analysis

Job description

Design, implement, and manage the Apple platform infrastructure (macOS, iOS, iPadOS, and tvOS) within a classified, high-security government environment.
Lead technical initiatives to deploy, configure, and maintain Apple hardware and software at scale, ensuring uptime and availability in secure settings.
Develop and deploy scalable solutions using enterprise management tools such as Jamf Pro, Apple Business Manager (ABM), or equivalent.
Develop and implement compliance frameworks, ensuring all Apple platforms conform to government-mandated policies and cyber governance standards (e.g., STIGs, CIS benchmarks, or related secure configuration baselines).
Maintain expert-level understanding and provide lifecycle management of the Apple ecosystem, including operating system updates, patch management, and security configurations.
Create customized scripts (e.g., shell, Python, or Swift) for automation, deployment, and configuration management tasks.
Engineer solutions to assist with identity management integration, such as SSO (e.g., Okta, Active Directory, or PKI deployments on Apple platforms).
Troubleshoot complex MacOS and iOS issues while working across cross-functional teams to provide seamless support to end users.
Collaborate with cybersecurity teams to participate in security audits, vulnerability assessments, and incident response for Apple endpoints.
Document workflows, technical designs, and operational guides for both technicians and end users to ensure clear communication of platform capabilities and processes.
Work closely with data security and compliance teams to monitor Apple device adherence to agency-mandated security policies.
Stay ahead of emerging trends in Apple technologies, tools, and government compliance requirements. Provide recommendations for innovation and modernization strategies.

Requirements

Bachelor’s degree and nine (9) years of experience. Four additional years of experience may be considered in lieu of a degree
DoD 8570 IAT Level II certification (e.g., Security+ CE, CCNA Security).
Active Top Secret Clearance, required.
Minimum of 7 years of technical experience managing Apple devices in enterprise IT environments (focused on macOS, iOS, and iPadOS).
Advanced expertise using and deploying Apple device management platforms/tools like Jamf Pro, Apple Configurator, and/or Apple Business/School Manager.
Strong scripting and automation skills (e.g., Bash, Python, Swift, or PowerShell).
In-depth knowledge of Apple security features like Gatekeeper, FileVault, T2/M-series chips, iCloud, and Secure Enclave, as well as their configuration/management at scale.
Experience working with enterprise identity services such as Active Directory, LDAP, OAuth, SAML, and/or PKI in relation to Apple systems.
Hands-on experience with large-scale macOS/iOS deployments and software distribution.
Demonstrated ability to harden and secure devices according to compliance requirements (e.g., DISA STIGs or other federal frameworks).
Solid understanding of networking fundamentals as they relate to Apple devices (e.g., 802.1x, Wi-Fi profiles, VPN, and MDM configuration).
Excellent communication skills, including the ability to craft technical documentation tailored to different audiences. Desired Qualifications:
Apple Certified Support Professional (ACSP), Apple Certified IT Professional (ACiT), or equivalent certification.
JAMF Certified Administrator or JAMF Certified Expert certification.
Familiarity with security tools such as Tanium, CrowdStrike, Splunk, or Carbon Black on Apple systems.
Experience working in a classified or government environment with Knowledge of federal guidance (FIPS, NIST frameworks).
Familiarity with integrating Apple hardware into cross-platform environments (Windows, Linux, etc.).
Knowledge of Zero Trust principles and their application to enterprise Apple devices.