MAC Admin EUC

Galactic Minds INC; Redwood City (CA); On-site; USD 90,000 - 140,000; Full time

Job summary

Galactic Minds INC seeks a Senior IT Support Engineer to lead endpoint operations and local network infrastructure in our Redwood City office. You will manage macOS fleets, deploy devices via MDM, and enforce security across endpoints and edge networks.

As the primary escalation point (Tier 2/3), you will troubleshoot complex MacOS issues, coordinate with infrastructure teams, and ensure high availability of VPN, Wi-Fi, and core services while onsite three days a week.

Qualifications

• 5–7 years of hands-on IT support in fast-growing environments.
• Strong macOS administration and scripting experience.
• Proven firewall, VPN, and network troubleshooting skills.
• Experience with enterprise MDM and IdP integration (Okta, Entra ID).

Responsibilities

• Lead endpoint operations and macOS fleet management.
• Serve as escalation point for Tier 2/3 issues.
• Manage enterprise WLAN and L2 networking operations.
• Maintain edge security systems and VPN connectivity.

Skills

macOS

Jamf Pro

MDM management

Networking

Identity management

ACSP

Tools

Jamf Pro

Kandji

Mosyle

Fortinet

Palo Alto

Meraki

Ubiquiti

OpenVPN

WireGuard

802.1X

Job description

MAC Admin EUC (MacBook & L2 Network Specialist)

Redwood City, CA – 3 days onsite

JAMF is the core skill and admin certified candidates preferred.

Position Overview

We are looking for a skilled Senior IT Support Engineer to lead endpoint operations and local network infrastructure at our Redwood City office. In this role, you will act as the primary technical escalation lead for complex macOS endpoints, enterprise Wi-Fi/wired networks, and edge security systems. You will play a crucial role in maintaining high system availability, streamlining hardware deployments, and enforcing robust security across our technical environment.

Core Responsibilities

• Endpoint & macOS Administration (60%)
• Act as the lead escalation point (Tier 2/3) for advanced hardware, OS, and software troubleshooting across Apple MacBook Pro and Air fleets.
• Provision, update, and secure endpoints using enterprise MDM solutions (e.g., Jamf Pro, Kandji, Mosyle).
• Enforce endpoint security controls, including FileVault encryption, EDR software, and OS compliance policies.
• Lead zero-touch provisioning via Apple Business Manager / Automated Device Enrollment and manage end-to-end device lifecycles.
• L2 Networking & WLAN Operations (30%)
• Manage and troubleshoot Layer 2 switching environments (VLANs, STP, LACP, trunking).
• Resolve enterprise Wi-Fi issues, perform heat map audits, optimize RF performance, and manage 802.1X RADIUS authentication (WPA2/WPA3 Enterprise).
• Maintain core local services including DHCP, DNS, IPAM, subnets, and office routing.
• Partner with infrastructure teams to maintain access switches, wireless access points (Cisco Meraki, Aruba, Ubiquiti), and physical cabling.
• Perimeter & Security Management (10%)
• Handle routine administration for office edge firewalls (Fortinet, Palo Alto Networks, Meraki MX).
• Maintain basic firewall policy sets, NAT rules, port forwarding, and site-to-site VPN connections.
• Resolve user VPN access issues (IPsec, OpenVPN, WireGuard) and manage ACL configurations.

Required Experience & Skills

• Experience: 5-7 years of hands-on IT support and systems engineering in fast-growing technical environments.
• macOS Expertise: Shell scripting (Zsh/Bash), system configuration management (.plist), and deep OS-level diagnostics.
• Networking & WLAN: Strong background in TCP/IP, L2 protocols, and 802.11a/b/g/n/ac/ax wireless standards.
• Identity & Fleet Management: Practical experience running enterprise MDM suites alongside IdPs (Okta, Microsoft Entra ID, Google Workspace).
• Desirable Certifications: Apple Certified Support Professional (ACSP), Jamf Certified Admin, CCNA, or Network+.