Senior Apple Jamf Pro Endpoint Specialist

Tetra Tech; Boulder (CO); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k) plan

Tuition assistance

Commuter benefits

Paid time off

11 federal holidays

Job summary

Halvik Corp is seeking a candidate to design, deploy, configure, administer, and support enterprise endpoint management solutions focused on Jamf Pro and Apple device management, with supporting Microsoft Intune expertise. This on-site role is based in Boulder, CO, Monday through Friday.

The ideal candidate will have direct Jamf Pro experience, ABM/ADE integration, Bash scripting, and strong macOS administration knowledge, supported by MS Entra ID/AD and SSO/SAML familiarity.

Qualifications

• AA/AS degree (or equivalent).
• Minimum 6 years of experience supporting endpoint management, enterprise mobility, systems administration, or related enterprise IT environments.
• Strong hands-on experience with Jamf Pro server deployment and administration.
• Experience installing, configuring, upgrading, and troubleshooting Jamf Pro infrastructure.
• Strong knowledge of macOS administration and Apple MDM.
• Experience with Apple Business Manager, Automated Device Enrollment, APNs, PreStage Enrollments, configuration profiles, policies, and Smart Groups.
• Experience with Bash/shell scripting and endpoint automation.
• Knowledge of FileVault, certificates, SSL/TLS, endpoint security, and compliance.
• Experience integrating Jamf with Entra ID/Active Directory and SSO/SAML.
• Working knowledge of Microsoft Intune and Microsoft endpoint management.
• Strong troubleshooting and enterprise endpoint-management experience.
• Experience with Jamf Protect and Jamf Connect.

Responsibilities

• Design, deploy, configure, and administer Jamf Pro server infrastructure in enterprise environments.
• Perform Jamf Pro installation, initial configuration, upgrades, patching, backup, and troubleshooting.
• Configure Jamf Pro components including JSS, database, web/application services, APNs, SSL certificates, and integrations.
• Configure Apple Business Manager (ABM) and integrate it with Jamf Pro for Automated Device Enrollment (ADE).
• Configure and manage PreStage Enrollments, enrollment profiles, configuration profiles, policies, Smart Groups, and Extension Attributes.
• Manage macOS, iOS, and iPadOS device enrollment, configuration, compliance, and lifecycle management.
• Package, test, deploy, and maintain macOS applications using Jamf Pro.
• Create Jamf policies and Bash/shell scripts to automate endpoint configuration and administration.
• Manage FileVault encryption, recovery keys, security settings, certificates, and endpoint compliance.
• Troubleshoot Jamf enrollment, policy execution, application deployment, configuration profile, certificate, APNs, and connectivity issues.
• Perform Jamf Pro upgrades and migrations, including pre-upgrade validation, backups, testing, and post-upgrade verification.
• Integrate Jamf with Microsoft Entra ID, Active Directory, SSO/SAML, and enterprise security platforms.
• Support Microsoft Intune for Windows and mobile device management, including enrollment, configuration policies, compliance policies, and application deployment.
• Support integration/co-management between Jamf Pro and Microsoft Intune where required.
• Support endpoint security solutions such as Microsoft Defender, CrowdStrike, and Zscaler.
• Monitor endpoint inventory, compliance, application status, and Jamf infrastructure health.
• Develop endpoint standards, technical documentation, deployment procedures, and troubleshooting guides.
• Work with Security, Network, Infrastructure, and Service Desk teams to resolve complex endpoint issues.
• Participate in endpoint migration, device refresh, OS upgrade, and enterprise deployment projects.
• Follow enterprise change, incident, problem-management, and security processes.

Skills

Jamf Pro

Apple device management

Microsoft Intune

ABM & ADE

PreStage Enrollments

Bash scripting

FileVault

Entra ID/AD & SSO/SAML

Jamf Connect

Jamf Protect

Education

AA/AS degree (or equivalent)

Job description

Halvik Corp is seeking a candidate to design, deploy, configure, administer, and support enterprise endpoint management solutions focused on Jamf Pro and Apple device management, with supporting Microsoft Intune expertise. This on-site role is based in Boulder, CO, Monday through Friday.

The ideal candidate will have direct Jamf Pro experience, ABM/ADE integration, Bash scripting, and strong macOS administration knowledge, supported by MS Entra ID/AD and SSO/SAML familiarity.