Apple Enterprise Endpoint Engineer (Jamf Pro)

Tetra Tech; Washington (District of Columbia); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company matching

Tuition Assistance

11 federal holidays and PTO

Flexible Spending Accounts

Job summary

Halvik Corp seeks a skilled Jamf Pro administrator to design, deploy, and manage enterprise endpoint management across macOS, iOS, and iPadOS devices. You will configure ABM/ADE, PreStage Enrollments, and policies, while integrating with Entra ID/AD and SSO/SAML.

The role requires strong scripting, security, and collaboration with Security and IT teams. On-site in Washington, DC, with a minimum 6 years in enterprise IT and a Public Trust clearance being highly valued.

Qualifications

• AA/AS degree or equivalent.
• 6+ years of experience in endpoint management or related enterprise IT environments.
• Hands-on experience with Jamf Pro deployment, configuration, upgrades, and troubleshooting.
• Strong knowledge of macOS administration and Apple MDM.
• Experience with Apple Business Manager, ADE, APNs, PreStage Enrollments, profiles, and Smart Groups.
• Experience with Bash/shell scripting and endpoint automation.
• Knowledge of FileVault, certificates, SSL/TLS, and endpoint security/compliance.
• Experience integrating Jamf with Entra ID/Active Directory and SSO/SAML.
• Working knowledge of Microsoft Intune.
• Experience with Jamf Protect and Jamf Connect.
• Ability to obtain and maintain a Public Trust security clearance.

Responsibilities

• Design, deploy, configure, and administer Jamf Pro server infrastructure in enterprise environments.
• Perform Jamf Pro installation, initial configuration, upgrades, patching, backup, and troubleshooting.
• Configure Jamf Pro components including JSS, database, web services, APNs, SSL certificates, and integrations.
• Configure ABM and ADE for Automated Device Enrollment.
• Manage PreStage Enrollments, enrollment profiles, configuration profiles, policies, Smart Groups, and Extension Attributes.
• Manage macOS, iOS, and iPadOS device enrollment, configuration, compliance, and lifecycle management.
• Package, test, deploy, and maintain macOS applications using Jamf Pro.
• Create Jamf policies and Bash scripts to automate endpoint configuration and administration.
• Manage FileVault encryption, recovery keys, security settings, certificates, and endpoint compliance.
• Troubleshoot Jamf enrollment, policy execution, app deployment, configuration profiles, certificates, APNs, and connectivity issues.
• Perform Jamf Pro upgrades and migrations with validation, backups, testing, and verification.
• Integrate Jamf with Entra ID/AD and SSO/SAML; support Microsoft Intune integration and coexistence.
• Support endpoint security solutions such as Microsoft Defender and other tools.
• Collaborate with Security, Network, Infrastructure, and Service Desk teams on complex endpoint issues.
• Participate in endpoint migration, device refresh, OS upgrade, and enterprise deployment projects.
• Follow enterprise change, incident, problem-management, and security processes.

Skills

Jamf Pro

macOS administration

Apple MDM

Bash scripting

Entra ID/AD

SSO/SAML

Intune integration

Endpoint security

Public Trust clearance

Jamf Protect/Connect

Education

AA/AS degree (or equivalent)

Tools

Jamf Pro

Microsoft Intune

Active Directory

Job description

Halvik Corp seeks a skilled Jamf Pro administrator to design, deploy, and manage enterprise endpoint management across macOS, iOS, and iPadOS devices. You will configure ABM/ADE, PreStage Enrollments, and policies, while integrating with Entra ID/AD and SSO/SAML.

The role requires strong scripting, security, and collaboration with Security and IT teams. On-site in Washington, DC, with a minimum 6 years in enterprise IT and a Public Trust clearance being highly valued.