MacOS Systems Engineer

We are seeking an experienced macOS Systems Engineer with a strong background in enterprise Apple endpoint management, Jamf Pro, automation, identity integration, security, and advanced troubleshooting.

This role is focused on the engineering, administration, and lifecycle management of macOS systems in an enterprise environment. The successful candidate should have substantial hands-on experience with Jamf Pro, including Jamf Cloud-hosted environments, or comparable Apple-focused MDM platforms.

Candidates should have strong practical knowledge of macOS administration, Apple Business Manager, Automated Device Enrollment, traditional MDM, Declarative Device Management (DDM), application deployment, patching, scripting, endpoint security, identity services, and enterprise integrations.

This is primarily a macOS engineering and endpoint management role, not a general desktop support position.

Following the initial onboarding or probationary period, the position is primarily remote. Candidates should live within reasonable commuting distance of Rockville, Maryland, generally within approximately 50 miles, and be able to report onsite as business or operational needs require., * Administer, configure, maintain, and troubleshoot enterprise macOS environments using Jamf Pro and Jamf Cloud.

• Develop and maintain Jamf policies, configuration profiles, Smart Groups, extension attributes, scripts, packages, Self Service workflows, inventory, and application deployment processes.
• Manage Apple Business Manager, Automated Device Enrollment (ADE), MDM, and Declarative Device Management (DDM) workflows.
• Develop and maintain macOS enrollment, provisioning, compliance, patching, software deployment, and security configurations.
• Engineer and support integrations with Microsoft Entra ID, Active Directory, SSO, Platform SSO (PSSO), Conditional Access, Microsoft Intune, Microsoft Defender, Microsoft 365, certificates, and PKI.
• Troubleshoot authentication, user access, certificates, SSO, account provisioning, and identity-related issues.
• Develop scripts and automation using Bash, Zsh, Python, PowerShell, APIs, or similar technologies.
• Package, deploy, configure, patch, and troubleshoot enterprise applications, including Microsoft 365 applications on macOS.
• Support macOS upgrades, migrations, patching, lifecycle management, and sustainment.
• Implement and maintain endpoint security controls, configuration standards, security baselines, and vulnerability remediation activities.
• Troubleshoot complex issues involving macOS, Jamf, MDM, applications, identity, networking, certificates, security tools, and hardware.
• Evaluate new macOS releases and Apple management technologies for compatibility and enterprise deployment.
• Develop and maintain technical documentation, SOPs, implementation guides, and troubleshooting procedures.
• Collaborate with security, identity, networking, infrastructure, and support teams on cross-functional technical issues.
• Provide advanced macOS technical escalation support, including support for executives when required.

• 7+ years of professional experience administering, engineering, or managing macOS systems in a business, enterprise, government, education, or similarly managed organizational environment.
• Strong hands-on experience managing enterprise macOS endpoints with Jamf Pro or a comparable Apple-focused MDM platform.
• Strong knowledge of Apple MDM, DDM, Apple Business Manager, ADE, configuration profiles, application deployment, software updates, inventory, compliance, and macOS lifecycle management.
• Strong working knowledge of Bash and/or Zsh scripting, with experience in Python, PowerShell, APIs, or other relevant automation technologies.
• Experience integrating or supporting macOS with Microsoft Entra ID and/or Active Directory.
• Experience with enterprise SSO and working knowledge of Apple Platform SSO (PSSO) or related modern macOS authentication technologies.
• Experience deploying, configuring, and troubleshooting Microsoft 365 / Microsoft Office products on macOS.
• Experience with endpoint security, patch management, vulnerability remediation, compliance, or system hardening.
• Strong hands-on macOS troubleshooting skills across operating system, application, authentication, MDM, networking, configuration, and hardware issues.
• Working knowledge of networking fundamentals, including TCP/IP, DNS, DHCP, Wi-Fi, LANs, and VPNs.
• Strong problem-solving skills and the ability to independently investigate unfamiliar or complex technical issues.
• Experience providing direct technical support to users, including executives when necessary.
• Strong documentation, written communication, and collaboration skills.

Candidates with significant enterprise macOS experience using another MDM platform such as Microsoft Intune, Workspace ONE, Kandji, or Mosyle may also be considered, provided they demonstrate strong Apple management knowledge and the ability to transition effectively into a Jamf Pro environment., * Bachelor’s degree in Information Technology, Information Systems, Computer Science, Cybersecurity, Engineering, or a related technical field, or equivalent professional experience and relevant industry certifications.

• Jamf Certified Tech (Jamf 200) or higher, or equivalent hands-on professional experience with Jamf Pro and enterprise macOS management.
• Formal Jamf certification is preferred but may be substituted with demonstrated real-world Jamf experience., * Jamf certification at the Jamf 200 level or higher.
• Apple professional or technical certification.
• ITIL v3 or ITIL 4 certification.
• Experience managing large-scale enterprise macOS environments.
• Experience with Platform SSO, DDM, Jamf APIs, Microsoft Graph APIs, or enterprise automation integrations.
• Experience integrating Jamf with Entra ID, Intune, Conditional Access, Microsoft Defender, or other enterprise platforms.
• Experience with certificate-based authentication, PKI, SCEP, or certificate lifecycle management.
• Experience with macOS security technologies including FileVault, Secure Token, Bootstrap Token, system extensions, network extensions, and PPPC.
• Experience with NIST, CIS Benchmarks, DISA STIGs, or other federal or enterprise security baselines.
• Vulnerability management and remediation experience.
• Experience working in federal government, government contracting, regulated, or security-focused enterprise environments.