Mac Systems Engineer: Security, IAM & Automation

Simons Foundation; New York (NY); On-site; USD 110,000 - 135,000; Full time

Benefits offered by this job

Benefits package

Job summary

Simons Foundation in New York City seeks a hands-on IT Administrator to manage Apple devices with Jamf Pro, administer Google Workspace, and harden IAM with Entra ID. You will automate repetitive tasks using scripts, monitor endpoint security alerts, and contribute to a security-first culture in a fast‑paced environment.

This full-time role collaborates with the IT team on projects, creates clear runbooks and documentation, and supports onboarding and offboarding while occasionally handling

Qualifications

• Bachelor’s degree in IT, CS, or related field or equivalent experience.
• 4+ years of IT experience supporting macOS and cloud/SaaS apps.
• Experience managing Apple devices with an MDM platform (Jamf Pro, Kandji, Mosyle, Intune).
• Experience administering IAM platforms (Microsoft Entra ID, Okta) including SSO/MFA.
• Experience with Google Workspace administration.
• Hands-on SaaS administration and security tooling.
• Familiarity with EDR platforms and incident response.
• Proficient in scripting (Bash, Python, PowerShell).

Responsibilities

• Manage and maintain Apple devices via Jamf Pro across Apple ecosystem.
• Administer Google Workspace including configuration and licenses.
• Oversee IAM: SSO, MFA, SCIM provisioning, RBAC and access reviews.
• Triage security alerts and participate in incident response.
• Automate IT tasks with scripts and runbooks.
• Collaborate on multiple IT projects and support team.

Skills

Jamf Pro

SaaS administration

Google Workspace

IAM (SSO/MFA)

Scripting (Bash/Python)

Security mindset

MacOS support

RBAC/SCIM

Education

Bachelor’s degree in IT/CS or related field

Tools

Kandji

Mosyle

Microsoft Intune

Job description

Simons Foundation in New York City seeks a hands-on IT Administrator to manage Apple devices with Jamf Pro, administer Google Workspace, and harden IAM with Entra ID. You will automate repetitive tasks using scripts, monitor endpoint security alerts, and contribute to a security-first culture in a fast‑paced environment.

This full-time role collaborates with the IT team on projects, creates clear runbooks and documentation, and supports onboarding and offboarding while occasionally handling