Mac Desktop Engineer (Workplace Technology & Endpoint Solutions)

We are seeking an experienced and proactive Level 3 Mac Desktop Engineer to join our Workplace Technology team. This role is ideal for a solution-driven professional who not only supports Mac users at an advanced level but also architects and improves endpoint management systems with a focus on scalability, automation, and security. You will serve as a subject matter expert (SME) for macOS, Jamf Pro, and Microsoft 365 within the enterprise environment, and play a critical role in enhancing the end-user experience through strategic IT initiatives., Strategic Endpoint Management: Lead the development and lifecycle management of Mac endpoints using Jamf Pro, with a focus on automation, standardization, and security compliance.

Jamf Pro Ownership: Own the architecture, configuration, and enhancement of our Jamf Pro instance. Develop custom policies, profiles, and packages to support business needs.

Application Packaging & Deployment: Package and maintain applications for deployment via Jamf. Ensure software is up to date, tested, and compliant with organizational standards and licensing requirements.

Automation & Scripting: Design and implement automation using Bash, Python, or AppleScript to streamline provisioning, patching, and incident resolution workflows.

Advanced Troubleshooting & Escalation: Act as the final escalation point for complex Mac-related incidents and systemic issues. Perform root cause analysis and long-term resolution planning.

Security & Compliance: Collaborate with InfoSec to enforce macOS security baselines (e.g., CIS benchmarks) and manage encrypted deployments, device hardening, and compliance reporting via Jamf and other tools.

Cross-Platform Integration: Partner with Windows and SaaS teams to ensure seamless integration across platforms and identity systems (e.g., CyberArk, Azure AD, Active Directory).

Microsoft 365 & SaaS Administration: Provide advanced support and policy management within M365 and other critical cloud SaaS platforms as they relate to macOS endpoints.

Lifecycle & Asset Management: Implement and maintain lifecycle processes for Apple devices from procurement through decommission, integrating asset tracking and compliance monitoring.

Documentation & Enablement: Create and maintain thorough documentation, workflows, and training resources for IT staff and end-users. Provide mentoring and technical guidance to junior team members.

Project Leadership: Lead or contribute to IT projects involving system upgrades, new technology rollouts, and endpoint security initiatives.

5+ years of hands-on experience supporting and managing macOS in a medium-to-large enterprise setting.

Expert-level proficiency with Jamf Pro administration, including advanced policy creation, smart groups, patch management, and extension attributes.

Strong understanding of macOS system internals, security frameworks, and enterprise deployment models.

Proficiency in scripting languages (e.g., Bash, Python) and experience automating repetitive IT tasks.

Familiarity with MDM/APNs, Apple Business Manager, DEP, and VPP.

In-depth knowledge of Microsoft 365 administration and integration in cross-platform environments.

Strong analytical, communication, and customer service skills.

Certifications such as Jamf 300+, Apple Certified Support Professional (ACSP), or Certified IT Professional (CompTIA, ITIL) are a strong plus.

Preferred Skills:

Experience integrating Jamf Pro with identity providers (e.g., CyberArk, Azure AD).

Familiarity with Zero-Touch deployment workflows.

Experience with security tools and policies for endpoint protection (e.g., FileVault, CrowdStrike, SentinelOne).

Working knowledge of Windows 10/11, particularly in mixed OS environments, to support collaboration with Windows fleet management and cross-platform issues.

Strong understanding of Microsoft 365 administration, including policy management, endpoint compliance, and integration with macOS.