MAC Admin EUC

Galactic Minds INC; Redwood City (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Galactic Minds INC seeks a Senior IT Support Engineer to own endpoint operations and local network infra at its Redwood City office. You will be the technical escalation lead for macOS endpoints, enterprise Wi-Fi, and edge security, ensuring high availability and secure device lifecycles.

Key focus areas include macOS admin, MDM deployment, VLANs and 802.1X, plus firewall and VPN management. A strong background in enterprise IT and security is required.

Qualifications

• 5-7 years of hands-on IT support and systems engineering experience.
• Proficient macOS administration, scripting, and OS-level diagnostics.
• Strong networking fundamentals including WLAN, VLANs, 802.1X, and VPNs.
• Experience running enterprise MDM suites alongside IdPs (Okta/Microsoft Entra/Google Workspace).
• Certs like ACSP, Jamf Admin, CCNA or Network+ are a plus.

Responsibilities

• Lead endpoint operations for macOS devices and manage device lifecycles.
• Provide Tier 2/3 escalation for hardware, OS, and software issues.
• Deploy and secure endpoints using Jamf Pro, Kandji, or Mosyle.
• Manage enterprise Wi‑Fi and wired networks, VLANs, and RADIUS auth.
• Oversee perimeter security with Fortinet/Palo Alto and VPN configurations.

Skills

macOS administration

Shell scripting

Network troubleshooting

MDM management

VPN & firewall basics

Tools

Jamf Pro

Kandji

Mosyle

Apple Business Manager

Automated Device Enrollment

Fortinet

Palo Alto

Meraki MX

Cisco Meraki

Aruba

Ubiquiti

Job description

MAC Admin EUC (MacBook & L2 Network Specialist)

Redwood City, CA (only locals)

Position Overview

We are looking for a skilled Senior IT Support Engineer to lead endpoint operations and local network infrastructure at our Redwood City office. In this role, you will act as the primary technical escalation lead for complex macOS endpoints, enterprise Wi-Fi/wired networks, and edge security systems. You will play a crucial role in maintaining high system availability, streamlining hardware deployments, and enforcing robust security across our technical environment.

Core Responsibilities

• Endpoint & macOS Administration (60%)
• Act as the lead escalation point (Tier 2/3) for advanced hardware, OS, and software troubleshooting across Apple MacBook Pro and Air fleets.
• Provision, update, and secure endpoints using enterprise MDM solutions (e.g., Jamf Pro, Kandji, Mosyle).
• Enforce endpoint security controls, including FileVault encryption, EDR software, and OS compliance policies.
• Lead zero-touch provisioning via Apple Business Manager / Automated Device Enrollment and manage end-to-end device lifecycles.
• L2 Networking & WLAN Operations (30%)
• Manage and troubleshoot Layer 2 switching environments (VLANs, STP, LACP, trunking).
• Resolve enterprise Wi-Fi issues, perform heat map audits, optimize RF performance, and manage 802.1X RADIUS authentication (WPA2/WPA3 Enterprise).
• Maintain core local services including DHCP, DNS, IPAM, subnets, and office routing.
• Partner with infrastructure teams to maintain access switches, wireless access points (Cisco Meraki, Aruba, Ubiquiti), and physical cabling.
• Perimeter & Security Management (10%)
• Handle routine administration for office edge firewalls (Fortinet, Palo Alto Networks, Meraki MX).
• Maintain basic firewall policy sets, NAT rules, port forwarding, and site-to-site VPN connections.
• Resolve user VPN access issues (IPsec, OpenVPN, WireGuard) and manage ACL configurations.

Required Experience & Skills

• Experience: 5-7 years of hands-on IT support and systems engineering in fast-growing technical environments.
• macOS Expertise: Shell scripting (Zsh/Bash), system configuration management (.plist), and deep OS-level diagnostics.
• Networking & WLAN: Strong background in TCP/IP, L2 protocols, and 802.11a/b/g/n/ac/ax wireless standards.
• Identity & Fleet Management: Practical experience running enterprise MDM suites alongside IdPs (Okta, Microsoft Entra ID, Google Workspace).
• Desirable Certifications: Apple Certified Support Professional (ACSP), Jamf Certified Admin, CCNA, or Network+.