Senior Mac Engineer

Description

The company holds a Department of Homeland Security contract and needs a Senior Mac Engineer to join its endpoint engineering and security team.

The team manages, secures, automates and supports enterprise Apple environments. The work centres on macOS endpoint management, security, app deployment, automation and troubleshooting, plus newer Apple technologies, with the aim of stronger security, faster deployments and a better experience for end users.

Responsibilities

• Run enterprise macOS environments end to end: enrolment, configuration, apps, patching, compliance and fault resolution.
• Manage Apple devices through Jamf Pro and Microsoft Intune.
• Build and upkeep macOS configuration profiles, policies, compliance settings, restrictions and security baselines.
• Automate device provisioning and enrolment through Apple Business Manager and Automated Device Enrollment (ADE).
• Package, test, roll out and maintain macOS apps, updates, scripts and settings.
• Keep macOS and applications patched so the fleet stays compliant.
• Write automation in Bash, Zsh, PowerShell or similar scripting languages.
• Deploy and troubleshoot endpoint controls such as encryption, certificates, authentication, firewalls and endpoint protection.
• Investigate hard endpoint problems and build lasting fixes.
• Help with vulnerability remediation, security assessments and compliance work.
• Test new Apple hardware, macOS releases and endpoint management tools.
• Handle escalated issues and advise junior engineers.
• Work clearly with customers, technical teams and other stakeholders, including joining client meetings and special projects when needed.

Requirements

• You must be able to obtain DHS EOD clearance.
• You need a bachelor's degree with 10 years of relevant experience, an associate's degree with 12 years, or 16 years of relevant experience alone.
• Solid experience running and engineering enterprise macOS.
• Experience with Jamf Pro, Microsoft Intune and/or comparable MDM platforms.
• Experience with Apple Business Manager and Automated Device Enrollment.
• Strong grasp of macOS configuration, app packaging, deployment, patching and troubleshooting.
• Experience scripting and automating macOS with Bash/Zsh, PowerShell or similar.
• Experience with Entra ID/Azure AD, Active Directory, SSO, certificates and/or PKI.
• Experience building endpoint security baselines, configuration policies and compliance controls.
• Desired: ITIL v3 or v4 certification.
• Desired: Jamf Certified Administrator or Jamf Certified Engineer certification.
• Desired: Apple professional certification.
• Desired: experience with NIST, CIS, STIG or other federal security baselines.
• Desired: vulnerability management experience.
• Desired: experience connecting Jamf with Entra ID, Intune, Microsoft Defender or other enterprise platforms.
• Desired: experience supporting large federal or heavily regulated environments.

Conditions

Full-time position.

No security clearance is needed to start.

No travel is required.

Final pay depends on factors such as location, federal contract labour categories and wage rates, relevant experience, specific skills, education and certifications.

The proposed salary range is $113,200 - $237,800.

The company offers a flexible working approach that helps staff balance quality work with their personal lives.

Benefits

• Competitive pay, benefits and learning and development opportunities.
• Healthcare, wellness, financial, retirement and family support benefits.
• Continuing education support.
• Flexible time off, plus access to learning resources.