Location: Fully Remote - Flexibility for occasional UK travel
Role
Own and support the day-to-day management of the enterprise Mac estate, ensuring devices remain secure, compliant, reliable and well documented. The role combines hands‑on macOS and Intune administration with incident resolution, service improvement and clear engagement with users, suppliers and technical teams.
Key responsibilities
- Administer macOS devices through Microsoft Intune including enrolment, configuration profiles, compliance policies, application deployment and user assignment.
- Plan and deliver macOS upgrades, maintain minimum OS (to Cyber Essentials Plus standards) and build requirements, and keep enrolment and user guidance current after major releases.
- Manage Mac application packaging, updates and remote settings, using scripting and automation where appropriate.
- Triage and resolve Mac incidents and requests, including enrolment, password recovery, VPN/access issues, application faults and device rebuilds or wipes.
- Review vulnerability reporting, remediation to Cyber Essentials Plus standards, and work with Security, Architecture, Identity, Service Management and suppliers on risks and changes.
- Maintain technical and user documentation, contribute to root cause analysis, and identify service improvements with clear business and user value.
- Follow ITIL/ITSM controls for incident, problem and change management, meet agreed service levels, and support out‑of‑hours activity when required.
Experience and capabilities
- Significant hands‑on experience supporting macOS in an enterprise environment.
- Practical Intune experience across Mac and mobile device management, application deployment and policy enforcement.
- Strong troubleshooting and decision‑making skills, including escalated incident coordination.
- Knowledge of Azure AD / Entra ID, Active Directory integration and Mac identity or access dependencies.
- Ability to explain complex technical topics clearly to non‑technical users and stakeholders.
- Mac application packaging and experience with Apple Business Manager.
- UK Security Clearance eligibility/holding as required.
- PowerShell or other scripting and automation experience.
- Experience using Tenable and managing vulnerabilities against CE+ standards.
- Understanding of ITIL/ITSM practices and incident or root cause reporting.
- Relevant Intune, Microsoft, Apple, Agile or ITIL certification.
- Experience configuring and managing devices using Jamf for assessing/planning future service improvements (we currently do not use Jamf)
Personal attributes
- Technically curious, customer‑focused and collaborative. Able to work independently in a hybrid environment, learn emerging technology quickly, challenge constructively, and balance innovation with security, architecture and operational governance.