System Administrator, macOS

Overview

Nakupuna Companies is seeking a System Administrator, macOS. The System Administrator, macOS is responsible for installing, configuring, securing, and supporting enterprise Apple macOS systems and related endpoint management technologies to ensure availability, performance, and security. This role may involve managing Gov Cloud environments, standalone environments, and systems connected to external networks such as NIPRNET, SIPRNET, DREN, JWICS, and NSA.

The following duties reflect management's definition of essential functions for this job but do not restrict the tasks that might be assigned. Management may assign additional duties and responsibilities at any time due to reasonable accommodation or other reasons.

• Install and configure current and legacy macOS systems, including system preferences, permissions, Terminal, bash/zsh, shell scripting, and enterprise endpoint configurations. Ensure configurations comply with C5
  
  ISR policies and procedures across DREN, NIPRNET, SIPRNET, JWICS, laboratory networks, and other supported environments.
• Monitor system performance and availability.
• Implement system security measures, review logs, and identify issues.
• Administer Apple Business Manager (ABM), Apple School Manager (ASM), Automated Device Enrollment (ADE), Volume Purchase Program (VPP), and Mobile Device Management (MDM) platforms such as Jamf Pro, Kandji, Mosyle, Microsoft Intune, or Workspace ONE for zero-touch deployment, configuration profiles, policy enforcement, and device management.
• Provide administration, planning, and execution support for Amazon Web Services and Microsoft Azure environments.
• Develop automation using bash, zsh, Python, or AppleScript and support software packaging using .pkg and .dmg installers.
• Maintain system documentation.
• Conduct operating system, application, and security patch management.

• Configure and maintain storage systems.
• Provision, deploy, inventory, maintain, and decommission Apple devices throughout their lifecycle.
• Configure identity integration with Active Directory, Microsoft Entra  (Azure AD), Okta, SSO, and Platform SSO.
• Support networking services including DNS, DHCP, VPN, Wi-Fi, and certificate management.
• Coordinate support requests with the Network Enterprise Center (NEC) regarding provisioning, performance, resource allocation, and related requests.
• Ensure managed systems comply with DISA STIGs, SRGs, CIS Benchmarks, NIST guidance, and other cybersecurity requirements while supporting File Vault, Gatekeeper, XProtect, Crowd Strike, Sentinel One, Apple Silicon (M-series), Intel hardware, Apple warranty, and Apple Care processes.
• Coordinate with the DREN Network Operations Center (NOC) and Security, Network, and Identity and Access Management (IAM) teams as required.

• Provide Tier 2/3 support for macOS hardware, operating systems, enterprise applications, and software conflicts.
• Support ACAS scans, IA vulnerability compliance, endpoint protection, cybersecurity requirements, and remediation activities.
• Apply operating system and security patches to maintain compliance.
• Troubleshoot hardware, software, networking, authentication, certificate, and application issues using root-cause analysis.
• Develop automation workflows, maintain runbooks, SOPs, and knowledge-base documentation, communicate technical issues to non-technical users, and independently prioritize assigned work.

Education and Experience:

• Bachelor’s degree in computer science, IT, or related field
• Required certifications including:
  • Security+ CE or Apple Certified Support Professional (ACSP) or Apple Certified IT Professional (ACITP)
• Other certifications desired but not required, such as:
  • Jamf Certified Technician, Administrator, or Expert
  • CompTIA A+
  • CompTIA Network+
  • SecurityX / CASP+
  • CCNP Security
  • CISA
  • FITSP-O
  • GICSP
  • SSCP
• 3+ years of desktop or endpoint support with macOS administration focus
• Experience with enterprise MDM solutions, Apple Business Manager

Clearance Requirements:
Active Secret security clearance required. Must be a U.S. citizen.

Location:

Aberdeen Proving Ground, MD

Physical Requirements:

The ideal candidate must…