Apple​/macOS Subject Matter Expert (Computer Engineering, Senior Associate

Position: Apple/macOS Subject Matter Expert (Computer Engineering, Senior Associate)
Clearance Required:

Top Secret

Education Required:

BA/BS

ship:

Required

Summary

The MIL Corporation is looking for an Apple/macOS Subject Matter Expert (Computer Engineering, Senior Associate). The Apple/macOS SME provides advanced engineering support for securing, configuring, imaging, patching, and managing macOS devices across the enterprise. This role focuses on designing, implementing, and maintaining technical controls that strengthen endpoint security, support device lifecycle operations, and ensure compliance across macOS platforms. The SME operates in a highly governed environment requiring change control discipline, detailed documentation, and collaboration with Service Desk Engineering, IAM, SOC, and Cybersecurity teams.

This position currently requires an on-site schedule. Schedule is subject to change based on company/contract requirements.

This position is currently unfunded and is being posted in anticipation of a future contract award and funding approval. We are proactively identifying and engaging with qualified candidates. While candidates may be contacted for pre-screening, any hiring decisions will be contingent upon funding availability and final program requirements or client approval.

Responsibilities

macOS Workstation Imaging & Baseline Engineering

• Design, build, maintain, and secure standard macOS workstation images for onsite and remote/VDI use, ensuring alignment with approved baseline security controls.
• Integrate macOS images with VDI clients, EDR agents, authentication mechanisms, and logging agents.
• Maintain version control, image-release processes, validation steps, and rollback procedures for macOS workstation images.
• Perform post-image validation testing (connectivity, authentication, app compatibility, security agents).

macOS Patch, Configuration, and Compliance Management

• Engineer and maintain macOS OS/application patching, version control, and lifecycle management using tools such as Ivanti, KACE, or JAMF.
• Remediate configuration drift and ensure compliance against secure macOS baseline standards.
• Document macOS baseline configurations, deployment workflows, and compliance remediation paths.

macOS Device Enrollment & Provisioning

• Implement and maintain macOS enrollment workflows using Apple Business Manager and JAMF Pro.
• Enforce secure provisioning, conditional access posture, and baseline profile application before network access.
• Support lifecycle operations: provisioning, reassignment, decommissioning, secure wipe, and File Vault recovery key escrow.
• Ensure accurate macOS asset inventory, ownership mapping, and lifecycle visibility.

Logging, Monitoring, Telemetry & Audit Engineering (macOS Focus)

• Configure macOS Unified Logs, endpoint agents, and log forwarding to SIEM/EDR platforms.
• Ensure telemetry health, audit coverage, and reliable ingestion of macOS security-relevant events.
• Support forensic collection procedures and maintain audit trails for macOS configuration changes and remediation actions.

Security Engineering for macOS Endpoints

• Design/implement controls to prevent initial compromise, lateral movement, and persistence mechanisms on macOS devices.
• Implement secure authentication, including passwordless methods and hardware-backed credentials (e.g., Yubi Key, CAC, software-based keys).
• Strengthen device enrollment, identity linkage, and endpoint visibility across macOS environments.

Documentation, Knowledge Transfer & Engineering Support

• Develop macOS runbooks for imaging, patching, enrollment troubleshooting, validation, and remediation.
• Maintain a versioned knowledge base covering macOS baselines, automation, and recovery procedures.
• Conduct training for Service Desk, IAM, and SOC teams to ensure operational sustainability.

Required Qualifications

• 10+ years of professional work experience
• 8+ years in IT, endpoint engineering, or cybersecurity.
• 6+ years performing engineering (not help desk) functions in enterprise environments.
• Experience working under strict change control, security governance, and audit processes.
• Extensive experience building and maintaining macOS workstation images (including automation, validation, rollback, version control).
• Hands-on experience with macOS patching and config management using Ivanti, KACE, and especially JAMF Pro.
• Experience with Apple Business Manager, File Vault key escrow, and macOS provisioning workflows.
• Ability to configure macOS endpoint logging and telemetry ingestion into SIEM/EDR platforms.
• Familiarity with passwordless authentication, Yubi Keys, CAC, and hardware-backed identity mechanisms for macOS.

Desired Qualifications

• Hands-on experience developing automation for macOS (e.g., JAMF scripting, Python, Zsh, or shell-based automation for imaging, patching, and compliance workflows).
• Prior experience designing or operating macOS telemetry pipelines, including log normalization strategies for SIEM/EDR platforms (e.g., Sentinel, Splunk, Crowd Strike).
• Familiarity with Apple enterprise ecosystem integrations, such as Apple Business Manager (ABM) advanced…