Senior Mac Endpoint Engineer

Brooksource; Detroit (MI); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Competitive benefits

401k with company match

Paid time off

Holiday pay

Job summary

Brooksource seeks a Senior Mac Endpoint Engineer to own the enterprise Mac platform, leading device management, Jamf administration, and security/compliance initiatives. You will collaborate with Security, Infrastructure, Service Desk, and Workplace Services to ensure a scalable, secure Apple ecosystem.

This role focuses on OS lifecycle management, software deployment, automation, and advanced endpoint support in a large enterprise environment.

Qualifications

• Bachelor's degree or equivalent experience.
• 8+ years of endpoint engineering or device management.
• 7+ years supporting macOS and Apple devices in enterprise environments.
• Strong expertise with Jamf Pro, Apple Business Manager, MDM, and macOS lifecycle management.
• Experience supporting endpoint security and compliance initiatives.

Responsibilities

• Manage enterprise Mac platform standards, enrollment, provisioning, configuration, and OS upgrades.
• Administer Jamf Pro, Apple Business Manager, DEP, and MDM policies.
• Support hardware lifecycle management and device refresh programs.
• Implement and maintain Mac security controls including FileVault and endpoint protection.
• Audit remediation, compliance reporting, and endpoint governance initiatives.
• Develop automation using Shell and Python and Jamf scripting.
• Partner with Security, Service Desk, and Asset Management to align endpoint standards.
• Coordinate with Apple, Jamf, and other vendors on platform enhancements and escalations.

Skills

Jamf Pro

Apple Business Manager

DEP

Shell scripting

Python scripting

Tanium

CrowdStrike

MDM

Compliance

macOS lifecycle

Education

Bachelor's degree or equivalent experience

Tools

Tanium

CrowdStrike

MDM

Job description

We are seeking a Senior Mac Endpoint Engineer to provide technical ownership of the enterprise Mac platform. This individual will lead Mac device management, Jamf administration, endpoint security, compliance initiatives, OS lifecycle management, software deployment, and advanced endpoint support. The role will partner closely with Security, Infrastructure, Service Desk, and Workplace Services teams to ensure a scalable, secure, and reliable Apple ecosystem.

Key Responsibilities

Mac Platform Engineering

• Manage enterprise Mac platform standards, device enrollment, provisioning, configuration profiles, software deployment, and OS upgrades.
• Administer Jamf Pro, Apple Business Manager, Automated Device Enrollment (DEP), and MDM policies.
• Support hardware lifecycle management, device refresh programs, and Apple ecosystem best practices.

Security & Compliance

• Implement and maintain Mac security controls including FileVault, local admin controls, DLP, endpoint protection, and compliance requirements.
• Support audit remediation, compliance reporting, and endpoint governance initiatives.
• Monitor endpoint health and security posture using Jamf, Tanium, and related management platforms.

Support & Operations

• Provide Level 3 support for complex macOS issues, application deployment failures, and security-related incidents.
• Develop and maintain technical documentation, runbooks, and operational procedures.
• Perform root cause analysis and drive remediation of recurring platform issues.
• Develop automation using Shell, Python, and Jamf scripting.
• Partner with Windows engineering, Security, Service Desk, and Asset Management teams to align endpoint standards.
• Coordinate with Apple, Jamf, and other vendors on platform enhancements and escalations.

Qualifications

Required

• Bachelor's degree or equivalent experience.
• 8+ years of endpoint engineering or device management experience.
• 7+ years supporting macOS and Apple devices in enterprise environments.
• Strong expertise with Jamf Pro, Apple Business Manager, MDM, and macOS lifecycle management.
• Experience supporting endpoint security and compliance initiatives.

Preferred

• Experience with Tanium, CrowdStrike, Intune, DLP, or other endpoint security tools.
• Strong Shell and/or Python scripting skills.
• Experience with regulatory environments, audit remediation, and change management processes.

Core Skills

• Jamf Pro
• Apple Business Manager
• Automated Device Enrollment (DEP)
• Software Deployment & Packaging
• Tanium
• CrowdStrike
• Shell/Python Scripting
• Compliance & Audit Support
• Disclaimer: Brooksource, Medasource, and Calculated Hire are part of the Eight Eleven Group family of companies and operate under Eight Eleven Group, LLC. All employees receive the same benefits, policies, and terms of employment.
• EEO: We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, creed, sex, sexual orientation, gender identity or expression, national origin, ancestry, age, disability, genetic information, marital status, military or veteran status, citizenship, pregnancy (including childbirth, lactation, and related conditions), or any other protected status in accordance with applicable federal, state, and local laws.
• Benefits & Perks: Brooksource offers competitive medical, dental, vision, Health Savings Account, Dependent Care FSA, and supplemental coverage with plans that can fit each employee’s needs. We offer a 401k plan that includes a company match and is fully vested after you become eligible, paid time off, sick time, and paid company holidays. We also offer an Employee Assistance Program (EAP) that provides services like virtual counseling, financial services, legal services, life coaching, etc.
• Pay Disclaimer: The pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.