Mac Systems Administrator

Carnegie Mellon University; Pittsburgh (Allegheny County); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Tuition benefits

Health insurance

Retirement savings

Transit pass

Job summary

The Carnegie Mellon University SEI Mac Systems Administrator role focuses on managing macOS and Apple environments with Jamf, automation, and lifecycle management. You will build a reliable, secure platform supporting researchers and developers while collaborating with IT teams to solve complex issues and implement DevOps practices.

We value proactive problem-solvers who communicate clearly and document solutions, with hands-on experience in macOS security, scripting, and IaC.

Qualifications

• Experience administering macOS in an enterprise environment.
• Experience with Jamf Pro or similar Apple device management platforms.
• Working knowledge of macOS security practices and patch management.
• Experience integrating macOS within heterogeneous environments.
• Scripting experience with Bash, Python, or zsh for automation.
• Strong troubleshooting and ability to communicate with technical and non-technical audiences.

Responsibilities

• Install, maintain, and configure macOS systems to ensure a reliable, secure platform.
• Leverage IaC, configuration management, and CI/CD practices to automate tasks.
• Implement and maintain macOS security controls and governance across the fleet.

Skills

Automation

Scripting

Problem-solving

Communication

Independent work

Tools

Jamf Pro

Git

Terraform

Ansible

Job description

About the role

The Mac Systems Administrator is responsible for managing, securing, and improving our macOS and Apple environment, with a focus on Jamf, automation, and device lifecycle management. You'll help build and maintain a reliable, secure platform that integrates with our broader IT infrastructure and supports the needs of researchers, developers, and other technical users. We're looking for a curious, motivated problem-solver who takes ownership of their work and enjoys learning new technologies. You'll work independently and collaborate with IT teams and researchers to solve technical challenges, improve how we manage our systems, and keep our macOS environment secure and running smoothly.

What You'll Do

• Systems Administration: Install, maintain, and configure macOS systems to ensure a reliable and secure platform. Integrate and support macOS systems within a heterogeneous enterprise environment while supporting developer-focused technologies and workflows. Provide tier 3 support for IT Services technologies, collaborating with systems administrators and engineers to resolve issues. Lead projects on new services and deployments. Diagnose and resolve complex end-user hardware and software issues. Train, document, and provide consulting for applications and services provided.
• Automation & Infrastructure as Code: Use automation concepts and experience with scripting languages to streamline tasks and improve operational efficiency. Leverage Infrastructure-as-Code (IaC), configuration management, and CI/CD practices. Manage configuration and deployment changes using Git-based workflows. Solve complex problems and drive automation using modern DevOps practices.
• Security & Governance: Implement and maintain macOS security controls, including system hardening, endpoint protection, encryption, vulnerability management, and configuration compliance. Ensure macOS systems comply with organizational security policies and applicable regulatory frameworks. Manage macOS identity and access controls, including integration with enterprise authentication.

Who You Are

You are committed to delivering a secure, reliable, and well-managed macOS environment. You take ownership of the platform throughout its lifecycle and are comfortable integrating macOS with enterprise technologies while supporting developers, researchers, and technical users. You are a proactive problem-solver who values automation and operational efficiency. You work collaboratively across IT teams, communicate effectively with technical and non-technical audiences, and understand the importance of making technology work for the people who depend on it.

Qualifications

Experience administering, configuring, deploying, and supporting macOS systems in an enterprise environment.

Experience with Apple device management platforms such as Jamf Pro, Apple School Manager, or Microsoft Intune.

Working knowledge of macOS security practices, including endpoint protection, encryption, system hardening, patch management, and vulnerability remediation.

Experience integrating and supporting macOS systems in heterogeneous environments.

Experience using scripting languages such as Bash, Python, or zsh to automate administrative tasks and improve efficiency.

Strong troubleshooting and problem-solving skills, including diagnosing complex hardware, software, authentication, and connectivity issues.

Ability to work independently and collaboratively with IT teams, developers, researchers, and other technical users.

Strong communication and documentation skills, with the ability to explain technical issues to both technical and non-technical audiences.

Preferred Qualifications

Experience supporting macOS systems in development, research, or other technically demanding environments.

Understanding of Infrastructure-as-Code (IaC), configuration management, and automation tools such as Ansible, Terraform, and APIs.

Familiarity with Microsoft Entra ID and other Microsoft 365 technologies.

Experience with cloud infrastructures like Azure and AWS.

Familiarity with Git-based workflows, CI/CD concepts, and configuration files using YAML and JSON.

Understanding of security and compliance frameworks, including NIST SP 800-171 and CMMC.

Additional Requirements

Participate in a rotating on-call schedule and occasionally work evenings or weekends to support critical services and scheduled maintenance.

Respond remotely to service outages within 30 minutes and, when necessary, report on-site to the local SEI facility within 60 minutes, barring extreme adverse conditions.

Travel between SEI and CMU facilities as required, with occasional travel to other SEI locations, conferences, and off-site meetings.

Who we are

The SEI helps advance software engineering principles and practices and serves as a national resource in software engineering, computer security, and process improvement. The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems. Its core purpose is to help organizations improve software engineering capabilities and develop or acquire the right software, defect-free, within budget and on time, every time.

Our benefits

Our benefits philosophy encompasses three driving priorities: choice, control and well‑being. Through Carnegie Mellon University, SEI offers a wide range of competitive employee benefits to help you live well, including comprehensive health insurance, tuition benefits, and a generous PTO and retirement savings policy to name a few. To learn more, visit these resources: Why Carnegie Mellon — to learn more about becoming part of an institution inspiring innovations that change the world. Benefits at a Glance — to get a listing of all employee benefits. Staff Member Benefits — to get detailed information about benefits for employees who are not faculty.

Why work here: Work with cutting edge technologies and experts to solve tough problems for the government and the nation. Get 8% monthly contribution for your retirement, without having to make a contribution yourself. Get tuition benefits to CMU for you and your dependent children. Enjoy a healthy work/life balance with a flexible work arrangement. Get access to university resources including campus fitness facilities, mindfulness programs, child care, free transportation on the Port Authority Transit System, etc. Enjoy annual professional development opportunities to attend conferences and training or obtain a certification. Carnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran. Read our Statement of Assurance to learn more. Joining the CMU team opens the door to an array of exceptional benefits. Benefits eligible employees enjoy a wide array of benefits including comprehensive medical, prescription, dental, and vision insurance as well as a generous retirement savings program with employer contributions. Unlock your potential with tuition benefits, take well-deserved breaks with ample paid time off and observed holidays, and rest easy with life and accidental death and disability insurance. Additional perks include a free Pittsburgh Regional Transit bus pass, access to our Family Concierge Team to help navigate childcare needs, fitness center access, and much more! For a comprehensive overview of the benefits available, explore our Benefits page. At Carnegie Mellon, we value the whole package when extending offers of employment. Beyond credentials, we evaluate the role and responsibilities, your valuable work experience, and the knowledge gained through education and training. We appreciate your unique skills and the perspective you bring. Your journey with us is about more than just a job; it’s about finding the perfect fit for your professional growth and personal aspirations.

Location

Pittsburgh, PA

Job Function

Systems Administration and Support

Position Type

Staff – Regular Full Time/Part time Full time

Pay Basis

Salary

More Information

Pay Basis Salary. Company pays a salary. Please visit “Why Carnegie Mellon” to learn more about becoming part of an institution inspiring innovations that change the world. Carnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran. Statement of Assurance.

Contact

For technical assistance, email HR Services or call 412-268-4600.

We are committed to providing an accessible experience throughout our recruitment process. If you need assistance or a reasonable accommodation at any stage of the application, interview, or hiring process, please contact Equal Opportunity Services by email at [e-mail] or by phone at 412-268-5072.