MAC/Jamf Engineer

We are looking for an experienced macOS / Jamf Engineer to lead the administration, deployment, and security of our Apple device fleet. You will be responsible for lifecycle management, from automated enrollment (DEP) and configuration profiles to software distribution and security patching. The successful candidate will ensure that our macOS environment is stable, secure, and aligned with enterprise standards.

• Device Lifecycle Management: Manage the entire lifecycle of Apple devices using Jamf Pro, including Automated Device Enrollment (formerly DEP) and Volume Purchase Program (VPP) integration.

• Configuration & Compliance: Design and maintain configuration profiles (MDM) to enforce security policies, Wi-Fi/VPN settings, and OS updates.

• Packaging & Deployment: Create, test, and deploy software packages (PKGs/DMGs), scripts and macOS deployment and upgrades to ensure all endpoints remain up to date..

• Automation: Utilize scripting (Bash, Zsh, or Python) to automate manual processes and extend Jamf functionality.

• Troubleshooting: Provide Tier 2/3 support for complex macOS issues, focusing on agent connectivity, provisioning errors, and integration conflicts.

• Platform Engineering: Design, standardize, and continuously improve the macOS endpoint architecture, including enrollment, provisioning, configuration, application deployment, update management, and device retirement.

• Scalability: Build maintainable Jamf solutions that can support a growing Mac fleet while minimizing manual intervention and configuration drift.

• Endpoint Security: Partner with Cyber Security to implement and maintain macOS security controls including FileVault, Secure Token, Recovery Lock, firewall, system extensions, and security baselines.

• Fleet Monitoring: Monitor Jamf and macOS fleet health, identify devices that fall out of compliance, and develop automated remediation workflows. Build dashboards/reports for enrollment status, OS versions, encryption, application versions, compliance, and device health.

• API management & Integration: Develop integrations using Jamf Pro APIs and automate workflows and integrate with security, inventory, and other enterprise systems.

• Incident Response: Participate in the investigation and resolution of macOS, Jamf, security, and application deployment incidents, including root-cause analysis and post-incident remediation.

• Vendor collaboration: Work with Apple, Jamf, and third-party vendors to troubleshoot platform issues, evaluate new capabilities, and influence the Mac platform roadmap.

•  Expert-level knowledge of Jamf Pro (administration, policies, groups, and advanced configuration).

•  In-depth knowledge of Apple’s MDM framework and the Apple Business Manager (ABM) portal.

• Strong proficiency in Bash or Zsh; experience with Python or Swift is a significant plus for modern macOS automation.

• Advanced understanding of the macOS architecture, file system, and permissions model (TCC - Transparency, Consent, and Control).

• Experience integrating Jamf with identity providers (Okta, Azure AD/Intune) and security tools (CrowdStrike, Carbon Black, or Tanium).

• Excellent documentation skills for creating knowledge base articles and end-user support guides.

• Strong problem-solving mindset with the ability to handle macOS-specific edge cases.

• Experience with macOS application packaging, signing, and deployment.

• Experience with macOS patch management and OS upgrade strategies.

• Experience troubleshooting system extensions, PPPC, network extensions, launch agents/daemons.

• Experience with MDM protocol behavior and Apple configuration profiles.

• Jamf Certified Tech / Admin / Expert

• Apple Certified Support Professional (ACSP)

• Experience with Apple’s Platform Single Sign-On (SSO)