Senior Mac Mobility Engineer

Description

The company holds a Department of Homeland Security (DHS) contract and needs a senior engineer for its endpoint engineering and security team.

The team manages, secures, automates and supports enterprise Apple devices, including Macs, iPhones and iPads.

The work centres on Apple endpoint engineering, mobile device management, app delivery, patching, security compliance, automation and troubleshooting, with the aim of improving security, efficiency, device reliability and the user experience.

Responsibilities

• Build, run and maintain enterprise Apple environments covering macOS, iOS and iPadOS.
• Handle enrollment, provisioning, configuration, app deployment, patching, compliance and troubleshooting across supported Apple platforms.
• Run and maintain Jamf Pro and Microsoft Intune.
• Create and upkeep configuration profiles, management policies, restrictions, compliance settings and security baselines.
• Support automated provisioning and enrollment through Apple Business Manager and Automated Device Enrollment (ADE).
• Package, test, deploy and maintain apps, OS updates, scripts and configurations on supported Apple devices.
• Manage OS and app update processes so devices stay secure, stable and compliant.
• Build and maintain automation in Bash, Zsh, PowerShell or similar scripting tools.
• Set up and troubleshoot endpoint security controls such as encryption, certificates, authentication, firewall settings and endpoint protection.
• Track device inventory, enrollment status, app deployments, configuration compliance and the health of endpoint management.
• Investigate complex endpoint, app, enrollment, connectivity and device management issues, find root causes and put lasting fixes in place.
• Help with vulnerability remediation, security assessments, endpoint hardening and compliance work.
• Assess new Apple hardware, OS releases and endpoint management features for security, compatibility and operational impact.
• Support integrations with Microsoft Entra ID, Active Directory, SSO, PKI and other identity, authentication, certificate and security services.
• Guide engineers and support staff, and help shape engineering standards and best practices.
• Write and maintain technical documentation, operating procedures, configuration standards and troubleshooting guides.
• Work with cybersecurity, infrastructure, service desk and customer teams to resolve issues and improve endpoint services.
• Share technical findings and recommendations with customers and stakeholders, join client meetings and take on special projects as needed.

Requirements

• Ability to obtain DHS Entry on Duty (EOD) approval.
• A bachelor's degree plus 10 years of relevant experience, an associate degree plus 12 years of relevant experience, or 16 years of relevant experience instead of a degree.
• Extensive hands-on experience running and engineering enterprise Apple environments.
• Strong experience administering macOS, including configuration, app deployment, patching, security and troubleshooting.
• Experience managing Apple devices with Jamf Pro, Microsoft Intune and/or comparable endpoint management tools.
• Experience supporting enterprise iOS and iPadOS devices in a mobile device management setting.
• Experience with Apple Business Manager and Automated Device Enrollment.
• Experience building and maintaining configuration profiles, management policies, compliance controls and security baselines.
• Experience with scripting and automation in Bash, Zsh, PowerShell or similar technologies.
• Experience with identity and access management, including Microsoft Entra ID, Active Directory, SSO, certificates and/or PKI.
• Experience implementing and troubleshooting endpoint security controls and supporting vulnerability remediation.
• Proven ability to solve complex endpoint management problems and deliver effective technical fixes.
• Strong analytical, documentation, communication and customer collaboration skills.
• Desired: ITIL v3 or v4 certification.
• Desired: Jamf Certified Administrator or Jamf Certified Engineer certification.
• Desired: Apple professional certification or relevant Apple platform training.
• Desired: Microsoft Intune or other endpoint management certification.
• Desired: Experience with NIST, CIS, STIG or other federal security baselines.
• Desired: Vulnerability management and endpoint hardening experience.
• Desired: Experience with mobile application management and application protection policies.
• Desired: Experience supporting large federal or highly regulated enterprise environments.

Conditions

Full-time position with no security clearance required to start and no travel required.

The salary range is $113,200 - $237,800.

Final pay depends on factors such as location, federal contract labor categories and wage rates, relevant prior experience, specific skills, education and certifications.

Benefits

• Competitive compensation, benefits and learning and development opportunities.
• Comprehensive benefits including healthcare, wellness, financial, retirement, family support, continuing education and time off.
• Flexible time off that lets you take the time you need.
• Access to learning resources for career development.