Apple Platform Engineer Security Clearance

Position: Apple Platform Engineer with Security Clearance
Senior Apple Platform Engineeer Clearance:
Active Top Secret, TS/SCI (Required)

Key Responsibilities:

• Design, implement, and manage the Apple platform infrastructure (macOS, iOS, iPadOS, and tvOS) within a classified, high-security government environment.
• Lead technical initiatives to deploy, configure, and maintain Apple hardware and software at scale, ensuring uptime and availability in secure settings.
• Develop and deploy scalable solutions using enterprise management tools such as Jamf Pro, Apple Business Manager (ABM), or equivalent.
• Develop and implement compliance frameworks, ensuring all Apple platforms conform to government-mandated policies and cyber governance standards (e.g., STIGs, CIS benchmarks, or related secure configuration baselines).
• Maintain expert-level understanding and provide lifecycle management of the Apple ecosystem, including operating system updates, patch management, and security configurations.
• Create customized scripts (e.g., shell, Python, or Swift) for automation, deployment, and configuration management tasks.
• Engineer solutions to assist with identity management integration, such as SSO (e.g., Okta, Active Directory, or PKI deployments on Apple platforms).
• Troubleshoot complex MacOS and iOS issues while working across cross-functional teams to provide seamless support to end users.

• Collaborate with cybersecurity teams to participate in security audits, vulnerability assessments, and incident response for Apple endpoints.
• Document workflows, technical designs, and operational guides for both technicians and end users to ensure clear communication of platform capabilities and processes.
• Work closely with data security and compliance teams to monitor Apple device adherence to agency-mandated security policies.
• Stay ahead of emerging trends in Apple technologies, tools, and government compliance requirements. Provide recommendations for innovation and modernization strategies.

Required Qualifications:

• Bachelor's degree and nine (9) years of experience. Four additional years of experience may be considered in lieu of a degree

• DoD 8570 IAT Level II certification (e.g., Security+ CE, CCNA Security).
• Active Top Secret Clearance, required.
• Minimum of 7 years of technical experience managing Apple devices in enterprise IT environments (focused on macOS, iOS, and iPadOS).
• Advanced expertise using and deploying Apple device management platforms/tools like Jamf Pro, Apple Configurator, and/or Apple Business/School Manager.
• Strong scripting and automation skills (e.g., Bash, Python, Swift, or Power Shell).
• In-depth knowledge of Apple security features like Gatekeeper, File Vault, T2/M-series chips, iCloud, and Secure Enclave, as well as their configuration/management at scale.
• Experience working with enterprise identity services such as Active Directory, LDAP, OAuth, SAML, and/or PKI in relation to Apple systems.
• Hands-on experience with large-scale macOS/iOS deployments and software distribution.
• Demonstrated ability to harden and secure devices according to compliance requirements (e.g., DISA STIGs or other federal frameworks).
• Solid understanding of networking fundamentals as they relate to Apple devices (e.g., 802.1x, Wi-Fi profiles, VPN, and MDM configuration).
• Excellent communication skills, including the ability to craft technical documentation tailored to different audiences. Desired

Qualifications:

• Apple Certified Support Professional (ACSP), Apple Certified IT Professional (ACiT), or equivalent certification.
• JAMF Certified Administrator or JAMF Certified Expert certification.
• Familiarity with security tools such as Tanium, Crowd Strike, Splunk, or Carbon Black on Apple systems.
• Experience working in a classified or government environment with Knowledge of federal guidance (FIPS, NIST frameworks).
• Familiarity with integrating Apple hardware into cross-platform environments (Windows, Linux, etc.).
• Knowledge of Zero Trust principles and their application to enterprise Apple devices.