Senior macOS Endpoint Engineer

macOS Device Management

• Manage enterprise Mac fleets using MDM solutions such as: Kandji, Jamf Pro, Microsoft Intune, and Workspace ONE
• Configure and maintain enrollment programs :  Apple Business Manager (ABM) and Automated Device Enrollment (ADE)
• Create and manage configuration profiles, restrictions, compliance policies, and security baselines.

Application Deployment & Packaging

• Package and Deploy PKG, DMG, and ZIP-based applications on macOS.
• Manage application updates and version control.
• Troubleshoot application installation and compatibility issues.

Security & Compliance

• Implement security policies and compliance standards.
• Manage:
  • FileVault encryption
  • Privacy Preferences Policy Control (PPPC)
  • System and Kernel Extensions
  • Certificates and keys

Identity & Access Management

• Integrate and support: Microsoft Entra ID (Azure AD), AD, Kerberos SSO and Platform SSO
• Manage user authentication and device trust policies.

Automation & Scripting

• Develop and maintain automation scripts using: Bash, Shell Scripting, Python and PowerShell (nice to have)
• Automate software deployment, compliance checks, reporting, and remediation tasks.

OS Upgrades & Patch Management

• Plan and execute macOS upgrades.
• Manage operating system patching and application updates.
• Monitor update compliance and remediation activities.

Troubleshooting & Support

• Serve as Level 3 escalation point for macOS-related issues.
• Troubleshoot:
  • Login and authentication issues
  • MDM enrollment failures
  • Application deployment problems
  • Network connectivity issues
  • Compliance and certificate-related incidents
• Analyze logs and perform root cause analysis.

Technical Skills

• Expert-level knowledge of macOS administration.
• Strong understanding of: Apple Business Manager, Device Enrollment, Configuration Profiles, FileVault, Certificates and Keychain Management
• Strong scripting experience using Bash and Shell scripting.
• Experience managing software packaging and deployment.
• Familiarity with enterprise networking concepts: DNS, VPN, Wi-Fi Profiles and Proxy Configuration

Troubleshooting Expertise

• System Logs, Unified Logs, Console Logs, Endpoint Security Logs and Application Crash Analysis 

Preferred Qualifications

• Experience with Kandji MDM or Equal Mac MDM administration.
• Experience supporting large-scale macOS environments (500+ devices).
• Exposure to ServiceNow, Jira, or similar ITSM tools.

Soft Skills

• Excellent communication and Strong analytical and troubleshooting abilities.
• Strong documentation and process improvement mindset.

Ideal Candidate Profile

The ideal candidate will have 5–6 years of enterprise macOS administration experience, strong expertise in Kandji/Jamf/Intune, solid Bash scripting and automation skills, deep understanding of Apple security and device management, and the ability to independently manage and troubleshoot large-scale Mac environments.