Systems Engineer

The Systems Engineer is responsible for designing, administering, securing, and continuously improving Apple device management solutions across the organization within the Microsoft Intune and Entra . This role is the primary engineering owner for Apple platforms, including iPads, iPhones, NEO devices, and Mac Books, with a focus on secure, scalable, and as close to zero-touch provisioning as possible.

We are seeking a passionate systems engineering professional with strong experience supporting Apple endpoints in enterprise environments, including automated device enrollment, mobile device management, application deployment, identity integration, security baselines, and lifecycle management. This individual will work closely with Information Technology, business partners, security stakeholders, and vendors to modernize endpoint management, improve operational efficiency, and ensure Apple devices are provisioned, secured, monitored, and supported consistently across the organization.

• Design, implement, administer, and continuously improve Apple device management solutions within Microsoft Intune, Entra , and Apple Business Manager
• Own engineering standards for iPads, iPhones, NEO devices, and Mac Books, including enrollment, configuration, security, compliance, application deployment, and lifecycle management
• Implement and support zero-touch or near-zero-touch provisioning workflows for Apple endpoints, including Automated Device Enrollment, enrollment profiles, device configuration profiles, and user-driven provisioning
• Engineer and maintain secure Microsoft 365 integrated login experiences across Apple platforms, including Entra , conditional access, MFA, SSO extensions, and app protection policies
• Deploy, manage, and support applications across Apple devices using Intune, including Microsoft 365 apps, business applications, required applications, available applications, and update policies
• Implement and maintain security baselines, compliance policies, device restrictions, encryption requirements, network configurations, certificates, Wi-Fi profiles, VPN profiles, and endpoint protection policies
• Support Microsoft Defender for Endpoint on Apple platforms, including deployment, configuration, monitoring, alerting, reporting, and remediation workflows
• Partner with security and infrastructure teams to ensure Apple endpoint solutions align with organizational security, compliance, logging, monitoring, and operational requirements
• Support identity and access management practices across Microsoft Entra , Google, and other enterprise systems as needed, including account lifecycle workflows, permissions, MFA, and access reviews
• Evaluate, implement, and support Microsoft, Apple, Google, and third-party solutions, including but not limited to Intune, Entra , Apple Business Manager, Defender for Endpoint, MFA, DLP, Chromebook console, and related endpoint management platforms
• Support large, distributed environments with a focus on automation, standardization, software patching, endpoint compliance, and platform stability
• Automate manual tasks and improve operational workflows using scripting and modern endpoint management practices
• Work closely with business partners, technical teams, and leadership to identify technology solutions that meet business, security, and operational requirements
• Meet deadlines and commitments, establish and measure SLAs, and ensure endpoint management services meet business needs
• Create, maintain, and improve technical documentation, operational procedures, deployment standards, support runbooks, and engineering diagrams
• Build strategic relationships with internal counterparts, external vendors, and service providers, holding them accountable for delivery and support expectations
• Implement and support required logging, alerting, reporting, and monitoring tools to provide visibility into endpoint health, compliance, security posture, uptime, and performance
• Establish standardized tools, configurations, and operational procedures for Apple endpoint management
• Work across third-party solution providers, understand business needs, define success metrics, and measure outcomes
• Multitask across several initiatives simultaneously while maintaining quality, security, and operational discipline
• Ensure concise and clear written and verbal communication
• Adhere to established standards, policies, and procedures
• Deliver outstanding human-centric customer service through all support, engineering, and operational efforts

• Bachelor's degree or equivalent experience
• Strong experience engineering and supporting Apple device management in enterprise environments, including iOS, iPadOS, and macOS
• Hands-on experience with Microsoft Intune for Apple device enrollment, configuration profiles, compliance policies, application deployment, app protection policies, and endpoint lifecycle management
• Experience with Apple Business Manager, Automated Device Enrollment, volume app assignment, managed…