Sr Mac Endpoint Engineer

Job Description Position Summary

The Senior Mac Endpoint Engineer is responsible for the design, deployment, security, and lifecycle management of Apple devices across the enterprise, with a strong focus on executive and VIP user populations. This role owns macOS endpoint strategy and operations, including Apple Business Manager, Jamf Pro, and seamless integration with Microsoft Intune for mobile device and application management (MDM/MAM) across both corporate‑issued and BYOD devices.

This is a senior, hands‑on engineering role requiring deep technical expertise, excellent judgment, and a high level of polish when supporting executives in complex, highly visible environments.

• Lead the architecture, deployment, and ongoing management of macOS endpoints in a large‑scale enterprise environment
• Own Jamf Pro administration, including policies, profiles, scripting, patching, compliance, and reporting
• Manage Apple Business Manager (ABM) for automated enrollment, device assignments, and application licensing
• Design and maintain zero‑touch provisioning and device lifecycle workflows (DEP/Automated Device Enrollment)
• Define and enforce macOS configuration standards, security baselines, and hardening policies

• Provide white‑glove endpoint engineering support for executives and senior leadership
• Design endpoint solutions that balance security, usability, and reliability for high‑profile users
• Partner closely with executive support teams to resolve complex issues with minimal disruption
• Anticipate and mitigate endpoint risks in executive use cases (travel, remote access, data sensitivity)

• Administer Microsoft Intune for mobile device management (MDM) and mobile application management (MAM)
• Support iOS/mobile device fleets for both corporate‑issued devices and BYOD users
• Design and manage Conditional Access, app protection policies, and data loss prevention controls
• Ensure consistent security posture across macOS, iOS, and mobile platforms

• Implement endpoint security controls including encryption, compliance monitoring, and endpoint protection
• Develop and maintain automation using Bash, Zsh, and/or Power Shell to streamline deployment, remediation, and reporting
• Partner with Information Security teams to support audits, compliance requirements, and incident response
• Monitor endpoint health and user experience metrics and communicate trends to leadership

• Work closely with Infrastructure, Identity, Networking, and Security teams to deliver integrated endpoint solutions
• Participate in pilot programs, testing, phased rollouts, and enterprise‑wide macOS initiatives
• Contribute to endpoint modernization roadmap and continuous improvement efforts

• 7+ years of experience supporting and engineering macOS endpoints in enterprise environments
• Expert‑level expertise with Jamf Pro and Apple Business Manager
• Strong experience managing macOS devices for executive / VIP users
• Extensive experience with Microsoft Intune, including:
  • Mobile Device Management (MDM)
  • Mobile Application Management (MAM)
  • BYOD and corporate‑issued device models
• Deep understanding of:
  • macOS security, preferences, permissions, and profiles
  • iOS device management and application protection
• Strong scripting and automation skills (Bash, Zsh, Power Shell preferred)
• Experience integrating macOS endpoints with identity platforms (Azure AD / Entra )
• Excellent troubleshooting skills across endpoint, identity, and network layers
• Strong communication skills and comfort working with executives and senior stakeholders

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.