Senior macOS Endpoint Engineer

Key Responsibilities

macOS Device Management

• Manage enterprise Mac fleets using MDM solutions such as: Kandji, Jamf Pro, Microsoft Intune, and Workspace ONE

• Configure and maintain enrollment programs :  Apple Business Manager (ABM) and Automated Device Enrollment (ADE)

• Create and manage configuration profiles, restrictions, compliance policies, and security baselines.

Application Deployment & Packaging

• Package and Deploy PKG, DMG, and ZIP-based applications on macOS.

• Manage application updates and version control.

• Troubleshoot application installation and compatibility issues.

Security & Compliance

• Implement security policies and compliance standards.

• Manage:

• FileVault encryption

• Privacy Preferences Policy Control (PPPC)

• System and Kernel Extensions

• Certificates and keys

Identity & Access Management

• Integrate and support: Microsoft Entra ID (Azure AD), AD, Kerberos SSO and Platform SSO

• Manage user authentication and device trust policies.

Automation & Scripting

• Develop and maintain automation scripts using: Bash, Shell Scripting, Python and PowerShell (nice to have)

• Automate software deployment, compliance checks, reporting, and remediation tasks.

OS Upgrades & Patch Management

• Plan and execute macOS upgrades.

• Manage operating system patching and application updates.

• Monitor update compliance and remediation activities.

Troubleshooting & Support

• Serve as Level 3 escalation point for macOS-related issues.

• Troubleshoot:

• Login and authentication issues

• MDM enrollment failures

• Application deployment problems

• Network connectivity issues

• Compliance and certificate-related incidents

• Analyze logs and perform root cause analysis.

Qualifications

Technical Skills

• Expert-level knowledge of macOS administration.

• Strong understanding of: Apple Business Manager, Device Enrollment, Configuration Profiles, FileVault, Certificates and Keychain Management

• Strong scripting experience using Bash and Shell scripting.

• Experience managing software packaging and deployment.

• Familiarity with enterprise networking concepts: DNS, VPN, Wi-Fi Profiles and Proxy Configuration

Troubleshooting Expertise

• System Logs, Unified Logs, Console Logs, Endpoint Security Logs and Application Crash Analysis

Preferred Qualifications

• Experience with Kandji MDM or Equal Mac MDM administration.

• Experience supporting large-scale macOS environments (500+ devices).

• Exposure to ServiceNow, Jira, or similar ITSM tools.

Soft Skills

• Excellent communication and Strong analytical and troubleshooting abilities.

• Strong documentation and process improvement mindset.

Ideal Candidate Profile

The ideal candidate will have 5–6 years of enterprise macOS administration experience , strong expertise in Kandji/Jamf/Intune , solid Bash scripting and automation skills , deep understanding of Apple security and device management , and the ability to independently manage and troubleshoot large-scale Mac environments.