Senior Mac Engineer

Description

The company is hiring a Senior Mac Engineer to support a Department of Homeland Security contract.

You will join an endpoint engineering and security team that manages, secures, automates and supports enterprise Apple environments.

The work centres on macOS endpoint management, security, application deployment, automation and troubleshooting, plus new Apple technologies. The goal is stronger security, quicker deployments and a better experience for end users.

Responsibilities

• Run and build out enterprise macOS environments, covering enrollment, configuration, apps, patching, compliance and fault diagnosis.
• Manage Apple devices through Jamf Pro and Microsoft Intune.
• Write and keep up macOS configuration profiles, policies, compliance settings, restrictions and security baselines.
• Set up automated provisioning and enrollment through Apple Business Manager and Automated Device Enrollment (ADE).
• Package, test, roll out and maintain macOS apps, updates, scripts and configurations.
• Keep macOS and installed applications patched and compliant.
• Write automation in Bash, Zsh, PowerShell or similar scripting languages.
• Deploy and troubleshoot endpoint security controls such as encryption, certificates, authentication, firewalls and endpoint protection.
• Investigate complicated endpoint problems and design lasting fixes.
• Help remediate vulnerabilities, run security assessments and drive endpoint compliance work.
• Test new Apple hardware, macOS releases and endpoint management tools.
• Handle escalated technical issues and advise junior engineers.
• Work clearly with customers, technical staff and other stakeholders.
• Join client meetings and special projects when needed.

Requirements

• Required: you must be able to obtain DHS EOD.
• Required: a bachelor's degree with 10 years of applicable experience, an associate's degree with 12 years, or 16 years of applicable experience with no degree.
• Required: solid experience administering and engineering enterprise macOS.
• Required: experience with Jamf Pro, Microsoft Intune, and or comparable MDM platforms.
• Required: experience with Apple Business Manager and Automated Device Enrollment.
• Required: strong skills in macOS configuration, application packaging, deployment, patching and troubleshooting.
• Required: experience scripting and automating macOS with Bash, Zsh, PowerShell or similar tools.
• Required: experience with Entra ID, Azure AD, Active Directory, SSO, certificates and or PKI.
• Required: experience building endpoint security baselines, configuration policies and compliance controls.
• Desired: ITIL v3 or v4 certification.
• Desired: Jamf Certified Administrator or Jamf Certified Engineer certification.
• Desired: Apple professional certification.
• Desired: experience with NIST, CIS, STIG or other federal security baselines.
• Desired: vulnerability management experience.
• Desired: experience connecting Jamf with Entra ID, Intune, Microsoft Defender or other enterprise platforms.
• Desired: experience supporting large federal or highly regulated environments.

Conditions

Full-time position.

No security clearance is needed to start, but you must be able to obtain DHS EOD.

No travel is required for this role.

The salary range is $113,200 - $237,800.

Final pay depends on factors including location, federal contract labor categories and wage rates, relevant prior experience, specific skills, education and certifications.

The company supports work-life balance and equal opportunity.

Benefits

• Flexible time off that you can use as you need.
• Access to learning resources for career growth.
• Comprehensive benefits including healthcare, wellness, financial, retirement, family support, continuing education and time off.
• Competitive compensation and learning and development opportunities.