Apple/macOS Subject Matter Expert (Computer Engineering, Senior Associate)

RPMGlobal; Washington (District of Columbia); On-site; USD 131,000 - 145,000; Full time

Benefits offered by this job

Health insurance

Paid time off

Tuition assistance

Retirement plans

Job summary

RPMGlobal is looking for an Apple/macOS Subject Matter Expert (Senior Associate) based in Washington, DC. This role involves providing advanced engineering support for securing and configuring macOS devices across the enterprise. Candidates should have a strong background in endpoint engineering and cybersecurity.

The position offers a projected compensation range of $131,000 - $145,000 per year and aims to strengthen endpoint security while ensuring compliance with industry standards.

Qualifications

• 10+ years of professional work experience.
• 8+ years in IT, endpoint engineering, or cybersecurity.
• Experience with strict change control and security governance.

Responsibilities

• Design and maintain macOS workstation images.
• Engineer patch management and compliance workflows.
• Implement security controls for macOS endpoints.

Skills

macOS imaging

patch management

cybersecurity

automation scripting

endpoint engineering

Education

Bachelor’s degree in IT or related field

Tools

Ivanti

JAMF Pro

KACE

Job description

Apple/macOS Subject Matter Expert (Computer Engineering, Senior Associate) Position Location Washington, DC

The MIL Corporation is looking for an Apple/macOS Subject Matter Expert (Computer Engineering, Senior Associate). The Apple/macOS SME provides advanced engineering support for securing, configuring, imaging, patching, and managing macOS devices across the enterprise. This role focuses on designing, implementing, and maintaining technical controls that strengthen endpoint security, support device lifecycle operations, and ensure compliance across macOS platforms. The SME operates in a highly governed environment requiring change control discipline, detailed documentation, and collaboration with Service Desk Engineering, IAM, SOC, and Cybersecurity teams.

This position currently requires an on-site schedule. Schedule is subject to change based on company/contract requirements.

This position is currently unfunded and is being posted in anticipation of a future contract award and funding approval. While candidates may be contacted for pre-screening, any hiring decisions will be contingent upon funding availability and final program requirements or client approval.

Responsibilities

macOS Workstation Imaging & Baseline Engineering

• Design, build, maintain, and secure standard macOS workstation images for onsite and remote/VDI use, ensuring alignment with approved baseline security controls.
• Integrate macOS images with VDI clients, EDR agents, authentication mechanisms, and logging agents.
• Maintain version control, image-release processes, validation steps, and rollback procedures for macOS workstation images.
• Perform post‑image validation testing (connectivity, authentication, app compatibility, security agents).

macOS Patch, Configuration, and Compliance Management

• Engineer and maintain macOS OS/application patching, version control, and lifecycle management using tools such as Ivanti, KACE, or JAMF.
• Remediate configuration drift and ensure compliance against secure macOS baseline standards.
• Document macOS baseline configurations, deployment workflows, and compliance remediation paths.
• Implement and maintain macOS enrollment workflows using Apple Business Manager and JAMF Pro.
• Enforce secure provisioning, conditional access posture, and baseline profile application before network access.
• Support lifecycle operations: provisioning, reassignment, decommissioning, secure wipe, and FileVault recovery key escrow.
• Ensure accurate macOS asset inventory, ownership mapping, and lifecycle visibility.
• Configure macOS Unified Logs, endpoint agents, and log forwarding to SIEM/EDR platforms.
• Ensure telemetry health, audit coverage, and reliable ingestion of macOS security‑relevant events.
• Support forensic collection procedures and maintain audit trails for macOS configuration changes and remediation actions.

Security Engineering for macOS Endpoints

• Design/implement controls to prevent initial compromise, lateral movement, and persistence mechanisms on macOS devices.
• Implement secure authentication, including passwordless methods and hardware-backed credentials (e.g., YubiKey, CAC, software-based keys).
• Strengthen device enrollment, identity linkage, and endpoint visibility across macOS environments.

Documentation, Knowledge Transfer & Engineering Support

• Develop macOS runbooks for imaging, patching, enrollment troubleshooting, validation, and remediation.
• Maintain a versioned knowledge base covering macOS baselines, automation, and recovery procedures.
• Conduct training for Service Desk, IAM, and SOC teams to ensure operational sustainability.

Required Qualifications

• 10+ years of professional work experience
• 8+ years in IT, endpoint engineering, or cybersecurity.
• 6+ years performing engineering (not help desk) functions in enterprise environments.
• Experience working under strict change control, security governance, and audit processes.
• Extensive experience building and maintaining macOS workstation images (including automation, validation, rollback, version control).
• Hands‑on experience with macOS patching and config management using Ivanti, KACE, and especially JAMF Pro.
• Experience with Apple Business Manager, FileVault key escrow, and macOS provisioning workflows.
• Ability to configure macOS endpoint logging and telemetry ingestion into SIEM/EDR platforms.
• Familiarity with passwordless authentication, YubiKeys, CAC, and hardware-backed identity mechanisms for macOS.

Desired Qualifications

• Hands‑on experience developing automation for macOS (e.g., JAMF scripting, Python, Zsh, or shell‑based automation for imaging, patching, and compliance workflows).
• Prior experience designing or operating macOS telemetry pipelines, including log normalization strategies for SIEM/EDR platforms (e.g., Sentinel, Splunk, CrowdStrike).
• Familiarity with Apple enterprise ecosystem integrations, such as Apple Business Manager (ABM) advanced workflows, MDM‑driven zero‑touch deployments, and certificate‑based network access on macOS.
• Experience supporting mixed‑OS environments (macOS + Windows) with an emphasis on contributing macOS‑focused engineering recommendations that improve overall enterprise endpoint posture.

Education

Bachelor’s degree in IT, Cybersecurity, or related field (or equivalent experience).

Compensation

The MIL Corporation values your contributions and offers a range of benefits to support your overall well-being. We are pleased to offer a comprehensive range of benefits to our full‑time employees which include health, life, disability, and retirement plans, as well as paid time off, opportunities for professional growth and tuition assistance. Additional benefits and incentives may also apply, which will be communicated during the hiring process.

For this position, the projected compensation range is $131,000 - $145,000 per year. This estimate represents the typical salary range and is just one part of MIL’s complete compensation package. Final salary for this position is determined based on factors such as individual qualifications, education, experience, and contractual limitations. Learn more on the MIL Careers page.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by state or federal law.