Endpoint Engineering Specialist - MacOS & Jamf

ConglomerateIT India; Hyderabad; Presencial; INR 2.500.000 - 4.500.000; Tempo integral

Resumo da vaga

ConglomerateIT India seeks an Endpoint Engineering Specialist focused on macOS and Jamf Pro. You will own the enterprise Apple endpoint tower, from enrollment to decommissioning, translating architecture and security requirements into reliable platform standards.

You will engineer policies, automate workflows, and lead complex troubleshooting across identity, security, and deployment. A strong background in macOS engineering for large-scale environments is essential.

Qualificações

• Deep enterprise macOS engineering and support experience covering Apple silicon and Intel deployment.
• Expert knowledge of macOS architecture, file systems, permissions, and security controls.
• Strong knowledge of Apple Business Manager, Automated Device Enrollment, and MDM behavior.
• Experience converting security/audit requirements into enforceable configurations.

Responsabilidades

• Own macOS and Jamf standards, roadmap, backlog, health, and lifecycle decisions.
• Engineer and administer Jamf Pro policies, profiles, and enrollments across the estate.
• Design repeatable naming, grouping, testing, deployment-ring, rollback, and recovery patterns.
• Assess releases, platform changes, and define readiness and support plans.
• Own enrollment, identity, and security workflows including SSO, MFA, and FileVault.
• Develop automation with shell scripting and maintain governance and runbooks.
• Lead investigations of incidents, drive root-cause analyses, and remediation.

Conhecimentos

macOS engineering

Jamf Pro

MDM administration

Shell scripting

Apple Business Manager

Automated Device Enrollment

Platform SSO

FileVault security

Formação

Bachelor’s degree in a related field

Ferramentas

Jamf Pro

Descrição da vaga

Job Title : Endoint Engineering Specialist - macOS & Jamf

Position Type : Full-time

ROLE SUMMARY

The Endpoint Engineering Specialist - macOS & Jamf is the technical owner and highest escalation point for the enterprise Apple endpoint tower. The role engineers, secures, automates, and supports macOS and Jamf Pro from enrollment through decommissioning, translating architecture, compliance, and user-experience requirements into reliable platform standards.

CORE RESPONSIBILITIES

Own macOS and Jamf standards, roadmap, backlog, operational health, technical debt, and lifecycle decisions.

Engineer and administer Jamf Pro policies, profiles, smart groups, scripts, extension attributes, packages, prestage enrollments, inventory, Self Service, scopes, exclusions, roles, certificates, tokens, integrations, and APIs.

Design repeatable naming, grouping, dependency, testing, deployment-ring, rollback, and recovery patterns.

Assess macOS releases, Apple hardware changes, platform deprecations, and Jamf capabilities; define readiness, compatibility, adoption, and support plans.

Enrollment, Identity & Security

Own Apple Business Manager, Automated Device Enrollment, Apps and Books assignments, tokens, provisioning, and device lifecycle workflows.

Integrate macOS with enterprise identity, Platform SSO, MFA, conditional access, certificates, Wi-Fi, VPN, proxy, FileVault recovery, and controlled administrative elevation.

Engineer security baselines for FileVault, Gatekeeper, firewall, privacy controls, application permissions, system extensions, login restrictions, endpoint security, and least privilege.

Develop compliance evidence, exception handling, drift detection, and automated remediation; resolve audit and control failures.

Applications, Updates & Automation

Package, configure, test, deploy, update, and retire macOS applications using signed packages, scripts, policies, profiles, managed preferences, and Self Service.

Own macOS update strategy, including compatibility testing, deployment rings, deferrals, enforcement, communications, exceptions, compliance monitoring, and failure remediation.

Develop production-quality shell and API automation with logging, validation, error handling, idempotency, secrets protection, source control, peer review, and rollback.

Escalation, Operations & Governance

Lead advanced diagnosis of Jamf, MDM, enrollment, identity, application, security, update, certificate, keychain, networking, performance, and peripheral issues using macOS and Jamf diagnostic tools.

Lead widespread Apple endpoint incidents, root cause analysis, corrective actions, vendor escalations, and prevention; create reusable diagnostics and lower-tier support playbooks.

Maintain standards, designs, runbooks, knowledge, diagrams, known errors, service metrics, and clear cross-team handoffs.

Operate within ITSM processes and provide evidence-based recommendations for risk, investment, renewals, and roadmap priorities.

REQUIRED QUALIFICATIONS

Deep enterprise macOS engineering and support experience, including Apple silicon and Intel deployment, activation, recovery, and lifecycle management.

Expert knowledge of macOS architecture, file systems, permissions, processes, launch services, logging, networking, keychain, certificates, profiles, security controls, and troubleshooting.

Strong knowledge of Apple Business Manager, Automated Device Enrollment, Apps and Books, MDM behavior, secure token, bootstrap token, Platform SSO, and FileVault key escrow.

Jamf, Packaging & Automation Expertise

Advanced Jamf Pro production experience across architecture, administration, scoping, inventory, policies, profiles, smart groups, extension attributes, prestage enrollment, Self Service, packages, scripts, APIs, access, certificates, and tokens.

Ability to resolve policy conflicts, failed MDM commands, inventory gaps, enrollment defects, configuration drift, deployment failures, and large-scale remediation needs.

Strong shell scripting and packaging skills, including secure reusable automation, logging, source control, signatures, notarization, launch agents or daemons, extensions, and application permissions.

Experience converting security and audit requirements into enforceable configurations, measurable compliance, exceptions, and remediation across identity, endpoint security, data protection, vulnerability management, and Zero Trust.

Experience integrating macOS with SSO, conditional access, MFA, certificates, Wi-Fi, VPN, proxies, security and compliance tooling, Microsoft Entra ID, and Microsoft Intune where applicable.

Ability to lead complex troubleshooting and communicate impact, risk, decisions, and next steps; strong standards, runbook, testing, and executive-reporting discipline.

Experience with ITSM practices and balancing user experience, security, reliability, supportability, and urgency. Bachelor’s degree in a related field or equivalent practical experience.

PREFERRED QUALIFICATIONS

Current Jamf administrator or expert certification and Apple deployment or support training.

Experience with Jamf Connect, Jamf Protect, Jamf Compliance Editor, certificate services, security platforms, and ITSM tooling.

Experience supporting global or critical users, platform migrations, large-scale deployments, mergers and acquisitions, or modernization programs.

WORKING MODEL & SUCCESS OUTCOMES

Deep technical individual contributor and accountable tower SME, leading through hands‑on expertise, standards, mentoring, documentation, and coordination.

May support on-call rotations, maintenance windows, major incidents, and urgent security remediation.

Success is measured by security, stability, predictable enrollment and delivery, update and compliance outcomes, reduced drift and manual work, effective escalation, and timely evidence-based platform decisions.