MAC Admin EUC (MacBook & L2 Network Specialist

We are looking for a skilled Senior IT Support Engineer to lead endpoint operations and local network infrastructure at our Redwood City office. In this role, you will act as the primary technical escalation lead for complex macOS endpoints, enterprise Wi-Fi/wired networks, and edge security systems. You will play a crucial role in maintaining high system availability, streamlining hardware deployments, and enforcing robust security across our technical environment.

Core Responsibilities

Endpoint & macOS Administration (60%)

Act as the lead escalation point (Tier 2/3) for advanced hardware, OS, and software troubleshooting across Apple MacBook Pro and Air fleets.

Provision, update, and secure endpoints using enterprise MDM solutions (e.g., Jamf Pro, Kandji, Mosyle).

Enforce endpoint security controls, including FileVault encryption, EDR software, and OS compliance policies.

Lead zero-touch provisioning via Apple Business Manager / Automated Device Enrollment and manage end-to-end device lifecycles.

L2 Networking & WLAN Operations (30%)

Manage and troubleshoot Layer 2 switching environments (VLANs, STP, LACP, trunking).

Resolve enterprise Wi-Fi issues, perform heat map audits, optimize RF performance, and manage 802.1X RADIUS authentication (WPA2/WPA3 Enterprise).

Maintain core local services including DHCP, DNS, IPAM, subnets, and office routing.

Partner with infrastructure teams to maintain access switches, wireless access points (Cisco Meraki, Aruba, Ubiquiti), and physical cabling.

Perimeter & Security Management (10%)

Handle routine administration for office edge firewalls (Fortinet, Palo Alto Networks, Meraki MX).

Maintain basic firewall policy sets, NAT rules, port forwarding, and site-to-site VPN connections.

Resolve user VPN access issues (IPsec, OpenVPN, WireGuard) and manage ACL configurations.

Experience: 5 7 years of hands-on IT support and systems engineering in fast-growing technical environments.

macOS Expertise: Shell scripting (Zsh/Bash), system configuration management (.plist), and deep OS-level diagnostics.

Networking & WLAN: Strong background in TCP/IP, L2 protocols, and 802.11a/b/g/n/ac/ax wireless standards.

Identity & Fleet Management: Practical experience running enterprise MDM suites alongside IdPs (Okta, Microsoft Entra ID, Google Workspace).

Desirable Certifications: Apple Certified Support Professional (ACSP), Jamf Certified Admin, CCNA, or Network+.