Endpoint Lifecycle Operations Engineer

Job Description Summary

As a Staff Endpoint Lifecycle Operations Engineer on the Digital Workplace team, you will play a key role in the ongoing design, build, and implementation of GE Aerospace’s Mac end‑user devices. We are seeking a Mac Services Engineer with strong hands‑on expertise in macOS validation and engineering, configuration management, application packaging and deployment, and patching. In this role, you will build, validate, deploy, and maintain macOS‑based laptops and desktops at enterprise scale, ensuring stable, secure, and well‑supported end‑user devices.

Essential Responsibilities:

• Configure and manage Mac firmware/security settings (File Vault, Secure Boot, Activation Lock, Startup Security Utility) across supported Apple hardware
• Create, maintain, and optimize standard macOS baselines and configuration profiles (golden baseline via MDM, declarative management where applicable)
• Ensure hardware and macOS version compatibility across supported Mac models and Apple silicon/Intel platforms

• Plan and execute validation for new macOS releases, point updates, Rapid Security Responses, and security patches
• Perform compatibility testing for kernel/system extensions, login items, security tools, network agents, and core enterprise apps
• Document known issues, provide mitigations/workarounds, and record validation results and release decisions

• Package, notarize, and validate Mac applications for enterprise deployment (PKG/DMG), including pre/postinstall scripts and configuration profiles
• Maintain and update app packages, dependencies, entitlement considerations, and uninstall/remediation scripts
• Collaborate with stakeholders to define packaging standards, code‑signing requirements, and phased deployment schedules

• Plan and implement macOS and application patching cycles using MDM policies, software update deferrals, and smart targeting
• Monitor patch compliance, investigate failures (update deferrals, disk space, power/state issues), and remediate at scale
• Partner with security teams to address CVEs, hardening baselines, and meet compliance targets and SLAs

• Serve as an escalation point for complex macOS endpoint incidents (network stack, kernel panics, File Vault, SSO, identity, certificates)
• Perform root cause analysis using system logs, profiles, and telemetry; implement durable fixes and prevention
• Provide technical guidance and runbooks to service desk and field support teams

• Create and maintain technical documentation, standard operating procedures, and knowledge base articles specific to macOS
• Identify automation opportunities (policy‑as‑code, packaging pipelines, remediation scripts) to streamline build, deployment, and patching
• Drive continuous improvement of Mac standards, tools, and service quality; benchmark against industry best practices

• Participate in the design, build, and rollout of macOS end‑user devices aligned to organizational goals and compliance standards

• Maintain strong relationships with internal teams (e.g., Cyber and Security, Network, Identity) and external vendors to ensure effective, high‑quality deployments

• Collaborate with Cyber and Security to develop and enforce robust macOS policies in regulated environments (e.g., GCC High‑adjacent constraints, CMMC‑aligned controls)

• Identify, maintain, and optimize the Mac endpoint service catalog; ensure accurate representation across ITSM toolsets

• Evolve the internal Mac product portfolio to deliver increased value to a global user base of 60,000+ employees

• Improve quality, delivery, and cost‑effectiveness of macOS endpoint lifecycle operations in line with SQDC priorities

• Act as macOS SME to troubleshoot and resolve complex endpoint issues and service interactions (identity, certificates, SSO, VPN, security agents)