Mac Support Engineer – L3 (JAMF Specialist), GESS - Global Capability Center

Alvarez & Marsal; Gurugram District; On-site; INR 1,500,000 - 2,800,000; Full time

Job summary

Alvarez & Marsal seeks an experienced Level 3 Mac Support Engineer to oversee advanced macOS support, JAMF Pro administration, and Apple device lifecycle management. You will drive automation, policy management, and security baselines across the enterprise.

The role requires 5+ years in Apple/Mac enterprise support, strong JAMF expertise, and proficiency in Bash/Python scripting. Collaboration with security, ITSM, and cross‑functional teams is essential for success.

Qualifications

• 5+ years in Apple/Mac enterprise support.
• Expert JAMF Pro administration and Self Service.
• Strong macOS architecture, networking, and security knowledge.
• Scripting in Bash and/or Python for automation.
• ABM and ADE experience.
• MDM, configuration profiles (mobileconfig) and OMA‑URI knowledge.
• Azure AD/Intune integration experience.
• Experience with ITSM tools such as ServiceNow.
• Excellent communication to non‑technical audiences.
• JAMF 100/200/300 or equivalent certification.
• ACSP or ACITP certification.
• Experience with endpoint security tools (Microsoft Defender, Falcon, SentinelOne).
• Zero Trust security principles in Apple environments.
• Familiarity with CI/CD and DevOps tooling in IT operations.
• Hybrid Mac/Windows support experience.
• Cloud platforms: Microsoft 365, Google Workspace, AWS.
• Privilege management tools like Beyond Trust / Delinea PrivMan.
• Self‑motivated, independent, detail‑oriented.

Responsibilities

• Provide Level 3 technical support for macOS devices across the organisation.
• Design, configure, and maintain JAMF Pro policies, profiles, and deployment workflows.
• Manage the full Apple device lifecycle including ABM enrollment and decommissioning.
• Develop and maintain JAMF scripts to automate device configuration and remediation.
• Create and manage software packages for deployment via JAMF Self Service.
• Enforce security baselines and CIS benchmarks across the Mac fleet.
• Collaborate with security to support endpoint detection and patch management.
• Integrate JAMF with Microsoft Entra ID/Intune and enterprise SSO.
• Manage device certificates for Wi‑Fi, VPN, and app authentication.
• Maintain device inventory, assets, and documentation in JAMF/ITSM.
• Mentor L1/L2 engineers on Mac support best practices.
• Contribute to IT projects and technology refresh programmes.
• Produce technical documentation, runbooks, and knowledge base articles.

Job description

About Alvarez & Marsal

Alvarez & Marsal (A&M) is a global consulting firm with over 10,000 entrepreneurial, action and results‑oriented professionals in over 40 countries. We take a hands‑on approach to solving our clients' problems and assisting them in reaching their potential. Our culture celebrates independent thinkers and doers who positively impact our clients and shape our industry. The collaborative environment and engaging work—guided by A&M's core values of Integrity, Quality, Objectivity, Fun, Personal Reward, and Inclusive Diversity—are why our people love working at A&M.

The Team

We are looking for an experienced Mac Support Engineer at Level 3 to join our IT team. This senior role is responsible for the advanced support, administration, and management of our Apple device estate using JAMF Pro. The successful candidate will act as the escalation point for complex macOS issues, drive automation and policy management, and contribute to the ongoing development of our Apple device management strategy.

How You Will Contribute

• Provide Level 3 technical support for macOS devices across the organisation, acting as the final escalation point for complex issues
• Design, configure, and maintain JAMF Pro policies, profiles, smart groups, and deployment workflows
• Manage the full Apple device lifecycle including procurement, enrolment via Apple Business Manager (ABM), deployment, and decommissioning
• Develop and maintain JAMF scripts (Bash/Python/Shell) to automate device configuration, software deployment, and remediation tasks
• Create and manage software packages for deployment via JAMF Self Service and automated policies
• Enforce security baselines and compliance policies across the Mac fleet, including FileVault, Gatekeeper, SIP, and CIS benchmarks
• Collaborate with the security team to support endpoint detection, patch management, and vulnerability remediation
• Integrate JAMF with third‑party tools such as Microsoft Entra ID/Intune and enterprise SSO solutions
• Manage certificate issuance and lifecycle across the Mac estate, including deployment of device certificates ensuring certificates are correctly provisioned for Wi‑Fi (802.1x), VPN, and application authentication
• Maintain accurate device inventory, asset records, and documentation within JAMF and ITSM tooling
• Mentor and provide guidance to L1/L2 engineers on Mac support best practices
• Contribute to IT projects, infrastructure improvements, and technology refresh programmes
• Produce and maintain technical documentation, runbooks, and knowledge base articles

Qualifications

• 5+ years of experience in Apple/Mac support within an enterprise environment
• Deep expertise in JAMF Pro administration, including policies, profiles, scripts, patch management, and Self Service
• Strong knowledge of macOS system architecture, directory services, networking, and security frameworks
• Proficiency in scripting languages including Bash and/or Python for automation and remediation
• Experience with Apple Business Manager (ABM) and Automated Device Enrolment (ADE)
• Solid understanding of MDM protocols, configuration profiles (mobileconfig), and OMA‑URI settings
• Experience integrating macOS endpoints with identity platforms such as Microsoft Entra ID (Azure AD)/Intune
• Strong troubleshooting and diagnostic skills across hardware, software, and networking issues
• Familiarity with ITSM platforms such as ServiceNow or equivalent
• Excellent communication skills with the ability to explain complex technical issues to non‑technical audiences
• JAMF 100, 200, or 300 certification (or equivalent JAMF Certified Associate/Admin/Expert)
• Apple Certified Support Professional (ACSP) or Apple Certified IT Professional (ACITP)
• Experience with endpoint security tools such as Microsoft Defender, Falcon, SentinelOne, or similar
• Knowledge of Zero Trust security principles and their application in Apple environments
• Familiarity with CI/CD pipelines and DevOps tooling in an IT operations context
• Experience supporting hybrid Mac/Windows environments and cross‑platform tooling
• Exposure to cloud platforms such as Microsoft 365, Google Workspace, or AWS
• Experience with privilege management tools such as Beyond Trust or Delinea PrivMan
• Self‑motivated and able to work independently with minimal supervision
• Methodical approach to problem‑solving with strong attention to detail
• Proactive mindset with a desire to continuously improve processes and tooling
• Collaborative team player who contributes positively to the wider IT function
• Comfortable working in a fast‑paced environment and managing competing priorities

Your journey at A&M

We recognize that our people are the driving force behind our success, which is why we prioritize an employee experience that fosters each person’s unique professional and personal development. Our robust performance development process promotes continuous learning, rewards your contributions, and fosters a culture of meritocracy. With top‑notch training and on‑the‑job learning opportunities, you can acquire new skills and advance your career. We prioritize your well‑being, providing benefits and resources to support you on your personal journey. Our people consistently highlight the growth opportunities, our unique, entrepreneurial culture, and the fun we have together as their favorite aspects of working at A&M. The possibilities are endless for high‑performing and passionate professionals.