Endpoint engineering & management

About the Role:

We are looking for an Endpoint engineering & management with 6+ years of experience in macOS endpoint engineering and management.

macOS & Jamf Pro (Apple Ecosystem):

• Architect, deploy, and manage Jamf Pro solutions for macOS devices in large-scale environments.
• Lead lifecycle management for Apple devices, including provisioning, configuration, patching, decommissioning, and Zero Touch Deployment via Apple Business Manager (ABM) and Automated Device Enrollment (ADE).
• Develop and manage configuration profiles, custom plist files, policies, smart groups, and scripts.
• Integrate and manage Jamf Connect, Jamf Protect, and other third-party tools.
• Package, deploy, and manage software and updates for macOS systems.
• Provide Tier 3 support for complex issues and manage escalations related to macOS hardware/software.
• Implement patch management for macOS environments.
• Maintain up-to-date documentation, compliance reporting, and auditing artifacts.
• Automate device provisioning, compliance checks, and configuration tasks using Bash, Python, Zsh, or AppleScript.

Microsoft Intune (Cross-Platform Endpoint Management):

• Design and implement Microsoft Intune policies for device configuration, compliance, and application deployment across macOS and Windows.
• Create and manage Intune configuration profiles, conditional access policies, security baselines, and compliance rules.
• Support application packaging and deployment via Intune and collaborate with app owners for streamlined distribution.
• Manage patching, OS updates, and version control for Intune-managed devices.
• Implement co-management with Configuration Manager (SCCM) where applicable.
• Monitor and maintain security posture in alignment with frameworks like CIS, ISO, and corporate InfoSec requirements.
• Provide support and mentoring to helpdesk and IT operations teams for Intune and Jamf.
• Stay current on Intune updates, new MDM features, and Microsoft cloud innovations.

Required Skillset:

• Minimum 4+ years of experience managing Microsoft Intune in enterprise environments (1,000+ devices).
• Expert-level knowledge of Jamf Pro (policies, scripts, configuration profiles, smart groups, EA).
• Strong experience with Apple Business Manager (ABM), ADE, and macOS security frameworks.
• In-depth understanding of macOS internals, MDM protocols, and enterprise security compliance.
• Proficiency in scripting languages such as Bash, Python, AppleScript, or Zsh for Jamf; PowerShell for Intune.
• Solid understanding of endpoint security tools such as CrowdStrike, EDR, or Defender for Endpoint.
• Experience with identity and access management tools such as Active Directory and Microsoft Entra ID.
• Excellent troubleshooting skills and experience providing Tier 3 support.

#LI-SS1 #LI-Onsite