Mac Engineer

Position Overview

The Senior End User Computing Engineer (Mac) role is based in New York, NY for a 12+ month duration. The Enterprise Endpoint Engineering team is seeking a highly skilled Mac Engineer with deep MDM expertise (Jamf Pro and Microsoft Intune), Apple Business Manager experience, software troubleshooting, development capabilities, and strong systems administration skills. This role focuses on designing and implementing Mac lifecycle management, enforcing security policies, and integrating seamlessly with enterprise tools, while continually enhancing engineering services and automating processes to improve reliability and reduce operational costs.

Key Responsibilities

• Architect, deploy, and manage macOS device management solutions using Jamf Pro and Microsoft Intune.
• Own the lifecycle management of macOS devices including provisioning, configuration, patching, and decommissioning.
• Develop and maintain automation scripts and policies to streamline device onboarding, updates, and compliance enforcement.
• Partner with security and compliance teams to enforce security baselines and implement best practices for endpoint protection.
• Lead troubleshooting efforts related to macOS hardware, software, and integration with enterprise tools.
• Provide mentorship and technical guidance to junior engineers and IT support teams.
• Monitor system performance, create documentation, and generate reports on compliance and inventory.
• Stay current with macOS updates, Apple enterprise technologies, and endpoint management trends.
• Assist with architecture design, implementation, and documenting processes & procedures for macOS device management solutions.
• Implement new systems, upgrades, and modifications including planning, testing, coordinating, and scheduling.
• Monitor the production environment and ensure speedy issue resolution, taking ownership of problem management activities.
• Provide Tier 3 escalation support for macOS-related incidents and troubleshooting.
• Address gaps and continually improve engineering services and device delivery.
• Ensure support documentation is produced, maintained, and improved.
• Automate manual processes to increase reliability and reduce operational costs.
• Package, deploy, and manage software and updates.
• Interface and collaborate with vendors and other departments, including InfoSec and IT Operations.
• Participate in audits and compliance activities by providing necessary documentation and reports.
• Keep up to date with the latest macOS features, MDM capabilities, and enterprise endpoint management best practices.

Required Qualifications

• 5+ years of experience in macOS end user computer engineering and administration in a large-scale enterprise environment (10K+ users).
• Expert-level experience with Jamf Pro (Policies, Smart Groups, Configuration Profiles, Scripts) with certifications: minimum Jamf 200; preferred Jamf 300.
• Experience with Apple Business Manager (ABM) and Automated Device Enrollment (ADE).
• In-depth knowledge of macOS, iOS, and tvOS along with familiarity in the latest MDM practices, Zero Touch Deployment methods, automation practices, data integrity, and analytical reporting.
• Proficient in scripting languages such as Bash, Python, AppleScript, Perl, or zsh for automation and custom workflows.
• Strong knowledge of macOS internals, security frameworks, and MDM protocols.
• Strong business acuity and practical understanding of market/industry trends.
• Excellent troubleshooting, documentation, and written/verbal communication skills.
• Ability to manage multiple simultaneous projects in a fast-paced, ambiguous environment.

Preferred Qualifications

• Hands-on experience configuring and managing Microsoft Intune for macOS.
• Experience with identity and access management systems (Active Directory, Entra AD, PingFederate, etc.).
• Familiarity with CIS benchmarks and compliance frameworks like ISO, SOC2, or SOX.
• Experience with endpoint detection & response (EDR) tools such as CrowdStrike.
• Knowledge of networking fundamentals including TCP/IP, DNS, firewalls, and routing protocols.