Lead Mac Platform Engineer

Capital One; Plano (TX); On-site; USD 150,000 - 171,000; Full time

Job summary

Capital One is seeking a Lead Mac Platform Engineer for our Mac Engineering team in Plano, TX. The role focuses on macOS vulnerability management, patching, and observability to keep endpoints secure and compliant.

You will package, test, and deploy patches, review reports, and collaborate with partners to reduce vulnerabilities. Strong scripting and JAMF Pro experience are essential for success.

Qualifications

• High School Diploma, GED, or equivalent certification.
• At least 2 years of experience of managing macOS devices leveraging JAMF Pro.
• At least 2 years of experience with Vulnerability Management and patching.
• At least 2 years of experience using packaging tools (JAMF’s Composer, Apple’s package utility, or Suspicious Package).
• At least 2 years of experience developing Shell scripts, AppleScript, or Python scripts.

Responsibilities

• Package, test, and schedule routine patches for business software when vulnerability patch fixes are released.
• Review vulnerability management reports and investigate devices with active vulnerabilities to drive down vulnerable endpoints.
• Engage with vulnerability management partners for debugging false-positives or obtaining more information on vulnerabilities.
• Escalate vulnerabilities/patching operations that need an exception due to potential user impact.
• Assist with business-as-usual packaging requests for new software and software updates.
• Research and suggest improvements to vulnerability management posture on endpoints to improve compliance metrics.
• Periodically review existing automation processes to ensure they are working as expected and automatically updating client software.
• Assist with testing and validation of new software and agents the engineering team is planning to deploy.
• Improve vulnerability observability with telemetry from Mac endpoints to better inform decisions with data and alert on problems as they arise.

Skills

JAMF Pro experience

Vulnerability management

Shell scripting

Python scripting

Education

Bachelor's Degree

High School Diploma or equivalent

Tools

JAMF Composer

Apple Package Utility

Suspicious Package

Qualys

CrowdStrike

Nessus

Job description

Lead Mac Platform Engineer

Capital One is looking for a Mac Platform Engineer to join our growing Mac Engineering team. The platform has grown to support over 40,000 endpoints in recent years, as one of the quickest growing platforms at Capital One. The engineering role will be focused on macOS vulnerability management, ensuring our fleet remains secure and “vuln-free”. The engineer will have opportunities to identify and implement solutions for improving our vulnerability management processes and observability, maintaining existing processes and assisting other members of our engineering team with software testing/validation.

Responsibilities:

• Package, test, and schedule out routine patches for business software when vulnerability patch fixes are released
• Review vulnerability management reports and investigate devices with active vulnerabilities to drive down vulnerable endpoints
• Engage with our vulnerability management partners for assistance with debugging false-positives, or getting more information related to vulnerabilities
• Escalate vulnerabilities/patching operations that need an exception due to potential user impact
• Assist with business-as-usual packaging requests for new software and software updates
• Research and suggest improvements to our vulnerability management posture on endpoints to improve our overall compliance metrics
• Periodically review existing automation processes to ensure they are working as expected and automatically updating client software
• Assist with testing and validation of new software and agents the engineering team is planning to deploy
• Improve vulnerability observability with telemetry from Mac endpoints to better inform decisions with data and alert on problems as they arise
  

Basic Qualifications

• High School Diploma, GED, or equivalent certification
• At least 2 years of experience of managing macOS devices leveraging JAMF Pro
• At least 2 years of experience with Vulnerability Management and patching
• At least 2 years of experience using packaging tools (JAMF’s Composer, Apple’s package utility, or Suspicious Package)
• At least 2 years of experience developing Shell scripts, AppleScript, or Python scripts

Preferred Qualifications

• Bachelor’s Degree
• One or more of the following JAMF Pro Certifications: JAMF Pro 200, 300, or 400.
• 2+ years of experience in Change Management process
• 2+ years of experience working within an Agile environment
• 2+ years of experience with vulnerability management reporting tools: Qualys, Crowdstrike, Symantec, Trellix, or Nessus.
• Experience with Mac Admins community and available open source solutions

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

McLean, VA: $164,800 - $188,100 for Lead Platform Engineer

Plano, TX: $149,800 - $171,000 for Lead Platform Engineer

Richmond, VA: $149,800 - $171,000 for Lead Platform Engineer

Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter.

This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.

Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.

This role is expected to accept applications for a minimum of 5 business days.

No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.

If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at [e-mail]. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

For technical support or questions about Capital One’s recruiting process, please send an email to [e-mail]

Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.

Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).