macOS Engineer

This is a fully remote position, open to applicants in District of Columbia.

📋 Description

• Develop, construct, maintain, and enhance standardized macOS workstation images for both on-site and remote/VDI applications.

• Design and uphold secure macOS baseline configurations, compliance settings, and lifecycle management controls.

• Manage JAMF Pro and Apple Business Manager for enrollment and provisioning workflows related to macOS devices.

• Assist in the provisioning of macOS devices, deployment of policies, distribution of software, patching, remediation of configuration drift, and secure decommissioning.

• Integrate macOS endpoint images and device configurations to meet VDI access requirements, along with security agents, logging agents, and authentication controls.

• Facilitate passwordless authentication and hardware-backed credentials, as permitted, for macOS users and privileged accounts.

• Configure and verify macOS logging and telemetry, which includes Unified Logs, endpoint agent reporting, and the forwarding of pertinent logs to SIEM/EDR platforms.

• Create runbooks for macOS imaging, enrollment, patch validation, troubleshooting, and recovery processes.

• Provide support for forensic collection, audit preparedness, and post-change validation for macOS endpoints.

• Offer technical insights to the Engineer, Cloud Service Desk Representative, and company stakeholders regarding the architecture, security posture, and supportability of macOS endpoints.

⛳️ Requirements

• A Bachelor’s degree in IT, Cybersecurity, or a related field is preferred; equivalent experience is acceptable.

• An active or interim Top Secret security clearance is required.

• Over 8 years of experience in IT, Endpoint Engineering, or Cybersecurity.

• More than 6 years of experience executing engineering functions within enterprise environments.

• Proven experience in building and maintaining macOS workstation images.

• Demonstrated experience in engineering secure macOS baseline configurations for both remote and on-site users.

• Experience in integrating macOS endpoints with VDI clients, authentication agents, EDR/AV tools, and logging agents.

• Competence in validating image integrity and supporting image releases, rollbacks, and testing procedures.

• Proficient in using JAMF Pro for managing macOS endpoints.

• Familiarity with Apple Business Manager for enrollment and provisioning workflows.

• Experience in managing macOS device enrollment, compliance, software deployment, and lifecycle operations.

• Knowledge of supporting FileVault/recovery key escrow, device wiping, reassignment, and decommissioning processes.

• Experience in configuring and supporting macOS Unified Logs.

• Proven experience in validating the forwarding of macOS logs and telemetry to SIEM/EDR platforms.

• Background in supporting secure authentication methods, including hardware-backed credentials where permitted.

• Experience with macOS compliance monitoring, baseline drift remediation, and audit support.

🏝️ Benefits

• Comprehensive health and wellness plans.

• Opportunities for professional development and career advancement.

• Flexible work arrangements and a supportive work environment.