> Markdown version of [/jobs/ext/557566-mac-system-administrator](https://www.wearedevelopers.com/jobs/ext/557566-mac-system-administrator). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Mac System Administrator - **Company:** Nsight - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $95,000.0 - $125,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Macintosh Computers, AppleScript (Scripting Language), Bash Shell, Command-Line Interface, Cloud Computing, Identity and Access Management, Python (Programming Language), Runbook, Systems Integration, Scripting, Okta, Information Technology, Patch Management, Gsuite, 3-tier Architectures, SentinelOne Expertise - **Published:** June 13, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=e27843b73cc6bafd ## About the Role Do you have experience in macOS support?, * 4 or more years of hands-on systems administration experience with at least 2 years in a macOS-first environment * Strong working knowledge of macOS internals, command line, scripting in Bash and Python, and deep troubleshooting ability * Production experience with an enterprise MDM; Iru (formerly Kandji) is strongly preferred and comparable depth in another MDM is acceptable * Deep Google Workspace administration experience across users, groups, DLP, security center, Vault, OU design, and application access policies; surface-level admin is not enough for this role * Working knowledge of a modern identity provider with Okta strongly preferred; SSO, MFA, SCIM provisioning, and lifecycle workflows should be part of your daily vocabulary * Working knowledge of endpoint detection and response using SentinelOne or equivalent * A genuine documentation habit; we will look for evidence of it in the interview Preferred: * Direct production experience with Iru (formerly Kandji), Okta Workforce Identity Cloud, and SentinelOne Singularity * Apple certifications such as ACSP or ACMT * Experience in healthcare or another regulated environment * Comfort working in a co-managed model alongside a managed service partner ## Description At Nsight Health, the Mac Systems Administrator is the engine of internal IT. You will own the macOS endpoint platform, operate the identity provider and Google Workspace day-to-day, and lead the technical project work that keeps a fully remote, fast-growing healthcare technology company running at its best. You will work alongside a managed service partner in a co-managed model where the MSP handles high-volume support and you own the platform they run on., * Endpoint Platform Ownership: Own the Iru (formerly Kandji) environment from top to bottom including blueprints, configuration profiles, patch management, vulnerability response, and fleet health. Manage the full macOS lifecycle from imaging and deployment through refresh and retirement. Triage endpoint detection and response alerts in partnership with the CISO and the MSP. * Identity and Access Management: Operate the identity provider (Okta strongly preferred) day-to-day across groups, applications, SCIM provisioning, lifecycle workflows, and MFA policies. Own the platform that makes joiner, mover, and leaver workflows effortless for the business. Maintain access reviews and audit-ready records in partnership with the Security team. * Google Workspace Administration: Administer Google Workspace at depth across users, groups, organizational unit design, DLP rules, security center monitoring, Vault retention, and application access policies. Build and maintain automations using GAM, Apps Script, or equivalent. * Project and Platform Work: Lead technical projects including identity provider rollouts, MDM migrations, integrations, and automation initiatives. Write scripts and tooling in Bash, Python, AppleScript, the Iru API, Okta Workflows, and GAM that reduce ticket volume and make the environment easier to operate for everyone. * Co-Managed Partnership and Escalation: Serve as Tier 3 escalation for the managed service partner, solving what they cannot. Participate in a light on-call rotation for genuine emergencies and work alongside the Director to set clear expectations, provide accurate documentation, and give the MSP the feedback they need to perform. * Documentation and Compliance: Document everything. If it is not in a runbook, it does not exist. Operate inside an active HIPAA, SOC 2, and HiTrust environment and partner with Security and Engineering to support audit evidence and control attestation. The Impact You'll Make * Platform Owner: Within your first six months, Iru and the identity provider will be healthy, documented, and instrumented. Runbooks will be written down and not living in anyone's head. The team will know exactly how the environment works because you built it that way. * Employee Experience Driver: Joiner, mover, and leaver workflows will run on rails so that onboarding day one feels effortless to every new hire. The IT experience at Nsight will be something people notice in a good way. * Automation Builder: Ticket volume on routine work will be measurably lower because you automated the repetitive things. The MSP will spend their time on real problems, not process gaps, because you gave them a platform worth running on. * Trusted Technical Resource: Your name will come up when something needs to be done well. The Director, the MSP, and the security team will trust your work because you document it, own it, and stand behind it. ## Related Videos - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [3 Key Steps for Optimizing DevOps Workflows](https://www.wearedevelopers.com/videos/962-3-key-steps-for-optimizing-devops-workflows) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Should Tech Managers Be Developers First? Pros and Cons](https://www.wearedevelopers.com/magazine/327-should-tech-managers-be-developers-first-pros-and-cons) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)