Apple/macOS Engineer (Remote)

Apple/MacOS Engineer

The Apple/macOS Engineer is responsible for engineering and maintaining the secure macOS endpoint environment, including workstation image development, macOS baseline configuration, JAMF administration, Apple Business Manager integration, macOS device enrollment, patching, compliance, authentication support, logging, and operational documentation. This role ensures that macOS endpoints used by on-site and remote users are securely configured, consistently provisioned, fully inventoried, and integrated with VDI, authentication, monitoring, and incident response requirements.
Responsibilities include designing, building, maintaining, and hardening standard macOS workstation images for on-site and remote/VDI use. The engineer will engineer and maintain secure macOS baseline configurations, compliance settings, and lifecycle controls. They will administer JAMF Pro and Apple Business Manager enrollment and provisioning workflows for macOS devices. Support for macOS device provisioning, policy deployment, software distribution, patching, configuration drift remediation, and secure decommissioning is required. Integration of macOS endpoint images and device configurations with VDI access requirements, security agents, logging agents, and authentication controls is also necessary. The role involves supporting passwordless authentication and hardware-backed credentials, where approved, for macOS users and privileged accounts. Configuration and validation of macOS logging and telemetry, including Unified Logs, endpoint agent reporting, and forwarding of relevant logs to SIEM/EDR platforms, are part of the job. Development of runbooks for macOS imaging, enrollment, patch validation, troubleshooting, and recovery is required. Assistance with forensic collection support, audit readiness, and post-change validation for macOS endpoints is also necessary. Technical guidance to the Engineer, Cloud Service Desk Representative, and company stakeholders on macOS endpoint architecture, security posture, and supportability is provided.
Core qualifications include a bachelor's degree in IT, Cybersecurity, or related field preferred; equivalent experience acceptable. An active or interim Top Secret security clearance is required. The candidate must have 8+ years of experience in IT, Endpoint Engineering, or Cybersecurity and 6+ years of experience performing engineering functions in enterprise environments. Experience working under formal change control, audit, and security governance processes is necessary.
Additional qualifications include experience building and maintaining macOS workstation images, engineering secure macOS baseline configurations for remote and on-site users, integrating macOS endpoints with VDI clients, authentication agents, EDR/AV tools, and logging agents, validating image integrity and supporting image release, rollback, and testing, using JAMF Pro for macOS endpoint management, experience with Apple Business Manager for enrollment and provisioning workflows, managing macOS device enrollment, compliance, software deployment, and lifecycle operations, supporting FileVault/recovery key escrow, device wipe, reassignment, and decommissioning, configuring and supporting macOS Unified Logs, validating forwarding of macOS logs and telemetry to SIEM/EDR platforms, supporting secure authentication methods, including hardware-backed credentials where approved, and experience with macOS compliance monitoring, baseline drift remediation, and audit support.