macOS / Apple Systems Engineer

About the role

We are looking for a highly specialized macOS / Apple Systems Engineer to lead the design, implementation, and ongoing management of our Apple ecosystem. You will act as the primary technical authority for macOS security, device management, and automation while collaborating closely with security, endpoint, and Microsoft Intune teams.

Key responsibilities

• Administer an Apple‑native MDM platform (Mosyle, Jamf, Kandji, or Addigy) – device enrollment, configuration profiles, patch management, app deployment, and policy enforcement.
• Manage Apple Business Manager – zero‑touch deployments, device assignments, DEP administration, and Apple ID token handling.
• Implement and maintain macOS security baselines, including FileVault encryption, Gatekeeper, System Integrity Protection, firewall rules, and notarization controls.
• Rotate local administrator credentials and oversee privilege management for Mac endpoints.
• Integrate macOS devices with EDR/XDR solutions (e.g., CrowdStrike) and support monitoring, response, and inventory processes.
• Collaborate with Intune administrators to align compliance policies and Conditional Access settings.
• Automate routine administration and remediation tasks using Bash, Zsh, Swift, and AppleScript.
• Support SOC 2 and other compliance audits, maintaining accurate documentation, runbooks, and technical procedures.

Required profile

• 4‑5 years of hands‑on experience managing enterprise macOS environments.
• Proven expertise with an Apple‑native MDM solution (Mosyle, Jamf, Kandji, Addigy).
• Experience configuring Apple Business Manager and zero‑touch deployment workflows.
• Strong background in macOS security hardening and familiarity with CIS Benchmarks or NIST frameworks.
• Excellent communication and stakeholder‑management abilities.

Required skills

• Mosyle, Jamf, Kandji, Addigy
• Apple Business Manager, DEP, zero‑touch deployment
• FileVault, Gatekeeper, System Integrity Protection (SIP)
• Bash, Zsh, Swift, AppleScript
• CrowdStrike (or similar EDR/XDR)
• Microsoft Intune
• Endpoint Central or comparable patching platform
• macOS security architecture and compliance frameworks (CIS, NIST)