Mac Endpoint Engineer

M&T Bank Corporation; Buffalo (NY); Hybrid; USD 97,000 - 162,000; Full time

Job summary

M&T Bank Corporation is seeking a skilled macOS Engineer to design and administer our enterprise macOS environment. You will partner with security, infrastructure, and support teams to ensure secure and compliant endpoint services in a four-days-on-site, one-day-remote setup at Seneca One, Buffalo, NY.

You will manage ABM/ADE, Intune for macOS, and Jamf Pro, develop configuration baselines, and keep systems patched and compliant.

Qualifications

• Six-plus years combined education and/or work experience in systems design, management and/or architecture.
• Four-plus years of endpoint engineering experience with enterprise macOS environments.
• Experience with Apple ecosystem technologies and Jamf Pro.

Responsibilities

• Design, implement, and maintain enterprise macOS workstation solutions.
• Manage Apple device lifecycle activities including provisioning, deployment, upgrades, refreshes and retirement.
• Engineer and deploy OS updates, security patches, and application upgrades.

Skills

macOS Admin

Scripting

Troubleshooting

On-call

Documentation

Education

Bachelor's degree or equivalent

4+ years endpoint engineering

3+ years macOS enterprise

Tools

Jamf Pro

Intune for macOS

ABM/ADE

PowerShell

Shell scripting

Job description

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per weekOverview:Responsible for engineering, administration, support, and lifecycle management of the enterprise macOS environment. The role partners across infrastructure, security, application, and support teams to deliver secure, compliant, and reliable endpoint services.Primary Responsibilities:macOS Engineering & AdministrationDesign, implement, and maintain enterprise macOS workstation solutions.Manage Apple device lifecycle activities including provisioning, deployment, upgrades, refreshes, and retirement.Administer Apple Business Manager (ABM), Automated Device Enrollment (ADE), and device management platforms such as Microsoft Intune and Jamf.Develop and maintain macOS configuration profiles, compliance policies, and security baselines.Engineer and deploy operating system updates, security patches, and application upgrades.Troubleshoot advanced hardware, software, operating system, and integration issues.Evaluate new Apple technologies and recommend enterprise adoption strategies.Endpoint Security & ComplianceImplement and maintain security controls aligned with enterprise standards.Support endpoint protection platforms, encryption technologies, and compliance monitoring.Partner with Cybersecurity teams to address vulnerabilities and remediation activities.Ensure endpoints remain compliant with regulatory, audit, and internal security requirements.Application ManagementPackage, deploy, and support Mac applications.Test application compatibility across macOS releases.Support software distribution, configuration management, and rollback procedures.Participate in application modernization and packaging initiatives.Operational ExcellenceDevelop automation solutions using PowerShell, Bash, or other scripting tools.Create and maintain technical documentation, standards, procedures, and knowledge articles.Support incident, problem, and change management processes.Participate in on-call support activities as required.Lead small-to-medium engineering initiatives and technical projects.Technical Skills:macOS AdministrationApple Business ManagerAutomated Device EnrollmentIntine for macOSJamf ProShell ScriptingEndpoint SecurityExperience with DDM (Declarative Device Management)Jamf API functionsPlatform SSOEducation and Experience Required:Combined minimum of 6 years’ higher education and/or work experience in systems design, management and/or architecture4+ years of endpoint engineering experience.3+ years supporting enterprise macOS environments.Experience with Apple ecosystem technologies.Experience with Jamf Pro.Knowledge of endpoint security, compliance, and device management best practices.Experience scripting and automating administrative functions.Strong troubleshooting and analytical skills.Education and Experience Preferred:Experience supporting enterprise Windows environments.Knowledge of Microsoft Entra ID, Microsoft 365, and Azure services.Experience with enterprise application packaging and deployment.Support Microsoft Intune, Configuration Manager (SCCM), and related endpoint management solutions.Experience within highly regulated industries such as banking or financial services.M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $97,100.00 - $161,800.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.LocationBuffalo, New York, United States of America