Associate Endpoint Engineer – Jamf / Apple

CRC Group; Charlotte (NC); On-site; USD 70,000 - 100,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Paid time off

Job summary

CRC Group is seeking a motivated Associate Endpoint Engineer to join our Modern Workplace team. The role focuses on Jamf and Apple device management, supporting macOS and iOS devices, and contributing to enterprise device lifecycle management.

The ideal candidate will deepen expertise in Jamf, automation, endpoint security, and Apple enterprise management while collaborating with infrastructure, security, and service desk teams in a dynamic environment at CRC Group.

Qualifications

• Foundational knowledge of macOS and/or iOS administration.
• Understanding of endpoint management or MDM concepts.
• Strong troubleshooting and analytical skills.
• Basic understanding of networking, identity, and endpoint security concepts.
• Ability to document technical processes clearly.
• Strong communication and collaboration with Infrastructure, Security, Service Desk, and Endpoint teams.

Responsibilities

• Assist with administration and day-to-day support of the Jamf environment.
• Support enrollment and provisioning of macOS and iOS devices.
• Assist with Automated Device Enrollment and Apple Business Manager integrations.
• Help develop and maintain Jamf policies, configuration profiles, PreStage enrollments, and Smart Groups.
• Support zero-touch provisioning and device lifecycle processes.
• Maintain accurate device inventory and endpoint information.
• Package, deploy, and maintain macOS applications.
• Assist with application upgrades and third-party patching.
• Support App Store and volume-purchased application deployment.
• Help maintain self-service application offerings for employees.
• Troubleshoot failed installations, deployments, and policy execution.
• Support implementation of endpoint security standards for Apple devices.
• Assist with FileVault encryption, password, firewall, certificate, and security configurations.
• Monitor device compliance and assist with remediation of non-compliant endpoints.
• Support integrations between Jamf and identity/security platforms.
• Assist with reporting required for security reviews and audits.

Skills

macOS administration

iOS administration

MDM concepts

troubleshooting

documentation

Tools

Jamf Pro

Apple Business Manager

Bash/zsh scripting

Microsoft Intune

Azure AD

ServiceNow

Job description

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won’t receive a response).

Regular or Temporary:

Regular

Language Fluency:

English (Required)

Work Shift:

1st Shift (United States of America)

Please review the following job description:

CRC Group is a leading, independent pure-play brokerage and underwriting specialty insurance distributor. Our culture puts people first, prioritizing long-term relationships, ethical decision-making, and continuous improvement. As a result of listening to our employees, CRC Group earned a Top Workplaces USA award three years in a row based solely on employee feedback and CRC Group is currently Great Place To Work Certified! If you want to work for a company where employees are valued and growth is encouraged, CRC Group could be the place.

Position Summary
We are seeking a motivated Associate Endpoint Engineer to join our Modern Workplace team and help support and enhance our Apple device management environment. This role will focus primarily on Jamf and Apple endpoint management, while also providing exposure to the broader modern endpoint ecosystem.

The ideal candidate has foundational experience supporting macOS and/or iOS devices, understands modern device management concepts, and is interested in developing deeper expertise in Jamf, automation, endpoint security, and enterprise device lifecycle management.

Key Responsibilities

Jamf & Apple Device Management

• Assist with administration and day-to-day support of the Jamf environment.
• Support enrollment and provisioning of macOS and iOS devices.
• Assist with Automated Device Enrollment and Apple Business Manager integrations.
• Help develop and maintain Jamf policies, configuration profiles, PreStage enrollments, and Smart Groups.
• Support zero-touch provisioning and device lifecycle processes.
• Maintain accurate device inventory and endpoint information.

Application & Patch Management

• Package, deploy, and maintain macOS applications.
• Assist with application upgrades and third-party patching.
• Support App Store and volume-purchased application deployment.
• Help maintain self-service application offerings for employees.
• Troubleshoot failed installations, deployments, and policy execution.

Security & Compliance

• Support implementation of endpoint security standards for Apple devices.
• Assist with FileVault encryption, password, firewall, certificate, and security configurations.
• Monitor device compliance and assist with remediation of non-compliant endpoints.
• Support integrations between Jamf and identity/security platforms.
• Assist with reporting required for security reviews and audits.

Troubleshooting & Support

• Troubleshoot macOS/iOS enrollment and MDM communication issues.
• Investigate Jamf policy, application, configuration, and compliance failures.
• Support macOS upgrades and device migrations.
• Partner with service desk and endpoint engineering teams to resolve escalated Apple device issues.
• Document known issues, troubleshooting procedures, and operational processes.

Automation & Continuous Improvement

• Develop foundational scripting skills using Bash/zsh.
• Assist with automation of Jamf policies and workflows.
• Gain experience using Jamf APIs and endpoint automation.
• Identify repetitive operational processes that can be automated.
• Contribute to reporting and device-health monitoring.

Required Qualifications

• Foundational knowledge of macOS and/or iOS administration.
• Understanding of endpoint management or MDM concepts.
• Strong troubleshooting and analytical skills.
• Basic understanding of networking, identity, and endpoint security concepts.
• Ability to document technical processes clearly.
• Strong communication skills and ability to work collaboratively with infrastructure, security, service desk, and endpoint teams.
• Desire to develop deeper expertise in Jamf and Apple enterprise management.

Preferred Qualifications

• Hands-on exposure to Jamf Pro.
• Experience with Apple Business Manager.
• Experience with Bash or zsh scripting.
• Familiarity with Microsoft Intune.
• Exposure to Microsoft Entra ID / Azure AD or other enterprise identity platforms.
• Experience working with infrastructure, endpoint, or platform teams.
• Familiarity with ServiceNow or similar IT service-management platforms.
• Exposure to Windows 365 or Azure Virtual Desktop.
• Interest in automation, APIs, analytics, Copilot, or other AI-assisted workflows.

The broader technology exposure is consistent with the profile you previously discussed for candidates, which included Microsoft Intune, Jamf, Windows 365, Azure Virtual Desktop, infrastructure/endpoint/platform experience, and AI-driven solutions.

What Success Looks Like

A successful JAMF Associate will develop from supporting routine Apple endpoint operations into independently troubleshooting Jamf issues, maintaining policies and configurations, supporting application and security initiatives, and contributing automation that improves the reliability and efficiency of Apple device management.

They will become a strong contributor within the broader Modern Workplace endpoint engineering function while building progressively deeper Jamf and Apple platform expertise.

General Description of Available Benefits for Eligible Employees of CRC Group: At CRC Group, we’re committed to supporting every aspect of teammates’ well‑being – physical, emotional, financial, social, and professional. Our best-in-class benefits program is designed to care for the whole you, offering a wide range of coverage and support. Eligible full‑time teammates enjoy access to medical, dental, vision, life, disability, and AD&D insurance; tax‑advantaged savings accounts; and a 401(k) plan with company match. CRC Group also offers generous paid time off programs, including company holidays, vacation and sick days, new parent leave, and more. Eligible positions may also qualify for restricted stock unitsand/or a deferred compensation plan.

CRC Group supports a diverse workforce and is an Equal Opportunity Employer that does not discriminate against individuals on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status or other classification protected by law. CRC Group is a Drug Free Workplace.