Desktop Endpoint Specialist

Tetra Tech; Washington (District of Columbia); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company matching

Tuition Assistance

11 federal holidays and PTO

Flexible Spending Accounts

Job summary

Halvik Corp seeks a skilled Jamf Pro administrator to design, deploy, and manage enterprise endpoint management across macOS, iOS, and iPadOS devices. You will configure ABM/ADE, PreStage Enrollments, and policies, while integrating with Entra ID/AD and SSO/SAML.

The role requires strong scripting, security, and collaboration with Security and IT teams. On-site in Washington, DC, with a minimum 6 years in enterprise IT and a Public Trust clearance being highly valued.

Qualifications

• AA/AS degree or equivalent.
• 6+ years of experience in endpoint management or related enterprise IT environments.
• Hands-on experience with Jamf Pro deployment, configuration, upgrades, and troubleshooting.
• Strong knowledge of macOS administration and Apple MDM.
• Experience with Apple Business Manager, ADE, APNs, PreStage Enrollments, profiles, and Smart Groups.
• Experience with Bash/shell scripting and endpoint automation.
• Knowledge of FileVault, certificates, SSL/TLS, and endpoint security/compliance.
• Experience integrating Jamf with Entra ID/Active Directory and SSO/SAML.
• Working knowledge of Microsoft Intune.
• Experience with Jamf Protect and Jamf Connect.
• Ability to obtain and maintain a Public Trust security clearance.

Responsibilities

• Design, deploy, configure, and administer Jamf Pro server infrastructure in enterprise environments.
• Perform Jamf Pro installation, initial configuration, upgrades, patching, backup, and troubleshooting.
• Configure Jamf Pro components including JSS, database, web services, APNs, SSL certificates, and integrations.
• Configure ABM and ADE for Automated Device Enrollment.
• Manage PreStage Enrollments, enrollment profiles, configuration profiles, policies, Smart Groups, and Extension Attributes.
• Manage macOS, iOS, and iPadOS device enrollment, configuration, compliance, and lifecycle management.
• Package, test, deploy, and maintain macOS applications using Jamf Pro.
• Create Jamf policies and Bash scripts to automate endpoint configuration and administration.
• Manage FileVault encryption, recovery keys, security settings, certificates, and endpoint compliance.
• Troubleshoot Jamf enrollment, policy execution, app deployment, configuration profiles, certificates, APNs, and connectivity issues.
• Perform Jamf Pro upgrades and migrations with validation, backups, testing, and verification.
• Integrate Jamf with Entra ID/AD and SSO/SAML; support Microsoft Intune integration and coexistence.
• Support endpoint security solutions such as Microsoft Defender and other tools.
• Collaborate with Security, Network, Infrastructure, and Service Desk teams on complex endpoint issues.
• Participate in endpoint migration, device refresh, OS upgrade, and enterprise deployment projects.
• Follow enterprise change, incident, problem-management, and security processes.

Skills

Jamf Pro

macOS administration

Apple MDM

Bash scripting

Entra ID/AD

SSO/SAML

Intune integration

Endpoint security

Public Trust clearance

Jamf Protect/Connect

Education

AA/AS degree (or equivalent)

Tools

Jamf Pro

Microsoft Intune

Active Directory

Job description

Halvik Corp delivers a wide range of services to 13 executive agencies and 15 independent agencies. Halvik is a highly successful WOB business with more than 50 prime contracts and 500+ professionals delivering Digital Services, Advanced Analytics, Artificial Intelligence/Machine Learning, Cyber Security and Cutting-Edge Technology across the US Government. Be a part of something special!

Position Overview

Halvik is seeking a candidate who will be responsible for designing, deploying, configuring, administering, and supporting enterprise endpoint management solutions. The ideal candidate will have direct experience with Jamf Pro and Apple device management, with supporting experience in Microsoft Intune.

This role in on-site in Washington, DC daily M-F.

Core Responsibilities

• Design, deploy, configure, and administer Jamf Pro server infrastructure in enterprise environments.
• Perform Jamf Pro installation, initial configuration, upgrades, patching, backup, and troubleshooting.
• Configure Jamf Pro components including JSS, database, web/application services, APNs, SSL certificates, and integrations.
• Configure Apple Business Manager (ABM) and integrate it with Jamf Pro for Automated Device Enrollment (ADE).
• Configure and manage PreStage Enrollments, enrollment profiles, configuration profiles, policies, Smart Groups, and Extension Attributes.
• Manage macOS, iOS, and iPadOS device enrollment, configuration, compliance, and lifecycle management.
• Package, test, deploy, and maintain macOS applications using Jamf Pro.
• Create Jamf policies and Bash/shell scripts to automate endpoint configuration and administration.
• Manage FileVault encryption, recovery keys, security settings, certificates, and endpoint compliance.
• Troubleshoot Jamf enrollment, policy execution, application deployment, configuration profile, certificate, APNs, and connectivity issues.
• Perform Jamf Pro upgrades and migrations, including pre-upgrade validation, backups, testing, and post-upgrade verification.
• Integrate Jamf with Microsoft Entra ID, Active Directory, SSO/SAML, and enterprise security platforms.
• Support Microsoft Intune for Windows and mobile device management, including enrollment, configuration policies, compliance policies, and application deployment.
• Support integration/co-management between Jamf Pro and Microsoft Intune where required.
• Support endpoint security solutions such as Microsoft Defender, CrowdStrike, and Zscaler.
• Monitor endpoint inventory, compliance, application status, and Jamf infrastructure health.
• Develop endpoint standards, technical documentation, deployment procedures, and troubleshooting guides.
• Work with Security, Network, Infrastructure, and Service Desk teams to resolve complex endpoint issues.
• Participate in endpoint migration, device refresh, OS upgrade, and enterprise deployment projects.
• Follow enterprise change, incident, problem-management, and security processes.

Minimum Requirements

• Education: AA/AS degree (or equivalent).
• Experience: Minimum 6 years of experience supporting endpoint management, enterprise mobility, systems administration, or related enterprise IT environments.
• Technical Proficiency:
  • Strong hands-on experience with Jamf Pro server deployment and administration.
  • Experience installing, configuring, upgrading, and troubleshooting Jamf Pro infrastructure.
  • Strong knowledge of macOS administration and Apple MDM.
  • Experience with Apple Business Manager, Automated Device Enrollment, APNs, PreStage Enrollments, configuration profiles, policies, and Smart Groups.
  • Experience with Bash/shell scripting and endpoint automation.
  • Knowledge of FileVault, certificates, SSL/TLS, endpoint security, and compliance.
  • Experience integrating Jamf with Entra ID/Active Directory and SSO/SAML.
  • Working knowledge of Microsoft Intune and Microsoft endpoint management.
  • Strong troubleshooting and enterprise endpoint-management experience.
  • Experience with Jamf Protect and Jamf Connect.
• Certifications: While not mandatory, possession will have more weight in consideration (i.e., Jamf Certified Associate, Administrator or Engineer).
• Must be able to obtain and maintain a Public Trust security clearance

Preferred Expertise

• Demonstrated success supporting Federal contracts.
• Strong technical analysis and troubleshooting capability and skills; ability to elevate complex issues; strong technical documentation skills.
• Strong analytical, written, and verbal communication skills, with the ability to translate technical risks and content into terms suitable for executive and government stakeholders.
• Ability to work collaboratively with others and contribute to a team environment.

Halvik offers a competitive full benefits package including:

• Company-supported medical, dental, vision, life, STD, and LTD insurance
• Benefits include 11 federal holidays and PTO
• Eligible employees may receive performance-based incentives in recognition of individual and/or team achievements.
• 401(k) with company matching
• Flexible Spending Accounts for commuter, medical, and dependent care expenses
• Tuition Assistance
• Charitable Contribution matching

Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Halvik'spay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.