Senior macOS Endpoint Engineer

Manage enterprise Mac fleets using MDM solutions such as: Kandji, Jamf Pro, Microsoft Intune, and Workspace ONE

Configure and maintain enrollment programs : Apple Business Manager (ABM) and Automated Device Enrollment (ADE)

Create and manage configuration profiles, restrictions, compliance policies, and security baselines.

Implement security policies and compliance standards.

Manage: FileVault encryption Privacy Preferences Policy Control (PPPC) System and Kernel Extensions Certificates and keys

FileVault encryption

Privacy Preferences Policy Control (PPPC)

System and Kernel Extensions

Certificates and keys

Integrate and support: Microsoft Entra ID (Azure AD), AD, Kerberos SSO and Platform SSO

Manage user authentication and device trust policies.

Develop and maintain automation scripts using: Bash, Shell Scripting, Python and PowerShell (nice to have)

Automate software deployment, compliance checks, reporting, and remediation tasks.

Plan and execute macOS upgrades.

Manage operating system patching and application updates.

Monitor update compliance and remediation activities.

Serve as Level 3 escalation point for macOS-related issues.

Troubleshoot: Login and authentication issues MDM enrollment failures Application deployment problems Network connectivity issues Compliance and certificate-related incidents

Login and authentication issues

MDM enrollment failures

Application deployment problems

Network connectivity issues

Compliance and certificate-related incidents

Analyze logs and perform root cause analysis.

System Logs, Unified Logs, Console Logs, Endpoint Security Logs and Application Crash Analysis

The ideal candidate will have 5–6 years of enterprise macOS administration experience , strong expertise in Kandji/Jamf/Intune , solid Bash scripting and automation skills , deep understanding of Apple security and device management , and the ability to independently manage and troubleshoot large-scale Mac environments.