> Markdown version of [/jobs/ext/3534053-endpoint-engineer-mac-sme](https://www.wearedevelopers.com/jobs/ext/3534053-endpoint-engineer-mac-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ENDPOINT ENGINEER - (MAC SME) - **Company:** Empower AI Inc. - **Location:** Quantico, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Artificial Intelligence, Amazon Web Services, Macintosh Computers, Apple IOS, Apple Mac Systems, Computing Platforms, Microsoft Azure, Cyber Security, NIPRNet, Zero Trust Network Access, Software Deployment, Digital Twin, Nessus, Casper Suite, AIOps, DODAF, Servicenow, Plan of Action and Milestones - **Published:** October 1, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9208332/endpoint-engineer-mac-sme ## About the Role * Bachelor's degree and a minimum of 3 years of related experience (a Master's degree with 8 years of related experience, or an additional 4 years of related experience in lieu of a degree, may be substituted). 7 years (education/experience) overall minimum required. * Must be a U.S. Citizen. * Must have an Active Top Secret Clearance with SCI eligibility (favorably adjudicated T5/T5R) to start. * Must be within investigation scope and/or currently enrolled in Continuous Evaluation / Continuous Vetting. * Must possess and maintain a current DoD 8570/8140 IAT Level I baseline certification (e.g., CompTIA A+ CE, Network+ CE, Security+ CE, CCNA-Security, or SSCP) prior to performing cybersecurity-related duties. * Demonstrated ability to work independently, analyze problems, determine the appropriate course of action, and exercise discretion and independent judgment with limited day-to-day supervision. * Minimum of 5 years of experience in systems or infrastructure engineering for enterprise MAC OS environments. * Current Apple Certified Support Professional (ACSP) Badge. * Expert knowledge of macOS / iOS/ Jamf and/or MAC architecture, Active Directory, Group Policy, and MAC automation. * Demonstrated experience designing and leading implementation of lab, pre-production, or digital twin environments and formal test-before-deploy practices. * Experience leading proof-of-concept evaluations, market research, and cost-benefit/ROM development for Government or enterprise decision-makers. * Extensive experience with DISA STIGs, ACAS/Nessus, RMF control implementation, POA&Ms, and eMASS. * Experience leading engineering teams, establishing standards, and executing changes through formal Change Management. * Excellent technical writing, briefing, and stakeholder communication skills; ability to participate in after-hours emergency on-call response. * Experience working on NIPRNet, SIPRNet and/or JWICS enclaves and with classified media handling procedures. DESIRED SKILLS: * CISSP, CASP+ CE, or GCED; AWS or Azure architect certification. * Experience supporting Department of War (DoW), DoD, or Intelligence Community environments across NIPRNet, SIPRNet, and JWICS enclaves. * Experience applying AI/ML, RPA, or AIOps to IT service management and endpoint operations, including ServiceNow integrations. * Familiarity with DoD Zero Trust Strategy and Reference Architecture, DoDAF 2.02, DoD ICAM Strategy, and Technology Business Management (TBM). * ITIL 4 Foundation or Managing Professional; PMP. * Experience supporting IT Capability Request (ITCR) analysis and governance briefings. ## Description * Engineer, operate, and maintain the NIPIRNet, SIPRNet and JWICS endpoint systems and management infrastructure (macOS / iOS/ Jamf, imaging, provisioning, Group Policy) in accordance with enclave-specific security, transfer, and handling procedures. * Plan and execute CAT I/II/III patch and software deployments on the classified enclaves within PRS timeframes, managing media transfer and disconnected/air-gapped update workflows where required. * Engineer and validate hardened images and configuration baselines for classified endpoints against DISA STIGs and enclave authority requirements, and provide RMF control evidence and POA&M inputs in eMASS for the classified endpoint systems. * Serve as the Tier III escalation point for classified-enclave endpoint incidents and coordinate with the enclave network, cybersecurity, and communications teams. * Lead the engineering design, implementation, and lifecycle of the enterprise endpoint infrastructure: hardened image pipelines, automated provisioning, endpoint management platform architecture (Jamf), configuration baselines, and VDI integration across all enclaves. * Lead the evaluation, cost-benefit analysis, and phased implementation of the Digital Twin capability for network and system modeling; author the Digital Twin Evaluation and Implementation Plan; and establish the practice that every significant change is tested in the digital replica before deployment. * Lead engineering for AI, automation, and analytics initiatives approved by the Government, including predictive analytics on service data, intelligent automation across support tiers, and integrations with the ITSM platform, and deliver Proof of Concept Reports documenting feasibility, risks, and benefits. * Conduct market research and produce Market Research Reports and Rough Orders of Magnitude (ROMs) for emerging technologies and proposed solutions to support Government planning and IT Capability Request analysis. ## Related Videos - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [The Intent Engineer: Closing the Gap Between Business & Engineering - Manuel Klein](https://www.wearedevelopers.com/videos/1855-the-intent-engineer-closing-the-gap-between-business-engineering-manuel-klein) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 210: AI Agents Are Go! Is MCP Dead? LLMs Crack Anonymity](https://www.wearedevelopers.com/magazine/709-dev-digest-210-ai-agents-are-go-is-mcp-dead-llms-crack-anonymity)