Senior Mac Systems Engineer

Workhuman; Framingham (MA); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Ownership of Apple endpoint platform

Lead JAMF evolution and deployment

Automation using scripting and APIs

Collaborative engineering culture

Job summary

Workhuman is seeking a Senior Mac Systems Engineer to own and evolve our enterprise Apple environment, including JAMF Pro, Apple Business Manager, and security integrations. You will lead deployment, patching, and lifecycle management for macOS across our global workforce.

You will shape automation strategies using Shell, JAMF APIs, Installomator, and Terraform, while collaborating with Security, Infrastructure, and Workplace Technology teams to deliver a secure, scalable Apple experience.

Qualifications

• Experience managing enterprise Apple environments.
• Hands-on JAMF Pro administration in production.
• Experience with JAMF Connect, JAMF Protect, and modern Apple endpoint management.
• Strong knowledge of macOS, Apple Business Manager, ADE, and device lifecycle management.
• Experience integrating Apple devices with Microsoft Entra, Intune Device Compliance, and Platform SSO.
• Strong scripting and automation using Shell, JAMF APIs, or similar tools.
• Experience implementing enterprise macOS security and compliance.
• Excellent troubleshooting, communication, and stakeholder management skills.
• JAMF 200/300 certifications are highly desirable.

Responsibilities

• Own and administer our JAMF Pro environment, including JAMF Connect, JAMF Protect, and Apple endpoint management.
• Design and support secure macOS and iPadOS deployment, lifecycle management, software delivery, and patching.
• Implement and maintain Apple Business Manager, Automated Device Enrollment, Platform SSO, and Microsoft Entra integration.
• Develop JAMF policies, configuration profiles, Smart Groups, automation, and software packaging.
• Improve endpoint security through FileVault, CIS compliance, Microsoft Defender for Mac, and JAMF Protect.
• Build automation using Shell scripting, JAMF APIs, Installomator, Workbrew, Terraform, or similar tools.
• Provide technical leadership and advanced troubleshooting across the Apple platform.
• Partner with Security, Infrastructure, Endpoint Engineering, and Service Desk teams to improve the Apple user experience.
• Create technical documentation, standards, and deployment procedures

Skills

JAMF Pro

Apple platform

macOS security

Platform SSO

Scripting automation

Microsoft Entra

Microsoft Intune

Shell scripting

Stakeholder management

Tools

JAMF Pro

JAMF Connect

JAMF Protect

Apple Business Manager

Automated Device Enrollment

Microsoft Entra

Microsoft Intune

Platform SSO

Shell scripting

Job description

We're looking for a Senior Mac Systems Engineer to lead the design, management, security, and evolution of Workhuman's enterprise Apple environment.

As part of our Infrastructure team, you'll own our Apple endpoint platform, with responsibility for JAMF Pro, Apple Business Manager, macOS security, identity integration, automation, and modern deployment practices. You'll work closely with Infrastructure, Information Security, Workplace Technology, and Endpoint Engineering to deliver a secure, scalable, and seamless Apple experience for employees globally.

This is an exciting opportunity to shape the future of our Apple platform, drive automation, and lead key initiatives including zero-touch deployment, Platform SSO, and endpoint security.

**This is a hybrid role based in Framingham, with three days per week in the office.

What we can offer you

• Ownership of our enterprise Apple endpoint platform.

• Opportunity to lead the evolution of our JAMF Pro environment and modern Mac deployment strategy.

• Drive automation using scripting, JAMF APIs, and Infrastructure as Code.

• Work closely with Infrastructure, Security, and Workplace Technology on strategic initiatives.

• Lead projects focused on security, identity integration, and endpoint modernization.

• A collaborative engineering culture that values innovation and continuous improvement.
  

Responsibilities

• Own and administer our JAMF Pro environment, including JAMF Connect, JAMF Protect, and Apple endpoint management.

• Design and support secure macOS and iPadOS deployment, lifecycle management, software delivery, and patching.

• Implement and maintain Apple Business Manager, Automated Device Enrollment, Platform SSO, and Microsoft Entra integration.

• Develop JAMF policies, configuration profiles, Smart Groups, automation, and software packaging.

• Improve endpoint security through FileVault, CIS compliance, Microsoft Defender for Mac, and JAMF Protect.

• Build automation using Shell scripting, JAMF APIs, Installomator, Workbrew, Terraform, or similar tools.

• Provide technical leadership and advanced troubleshooting across the Apple platform.

• Partner with Security, Infrastructure, Endpoint Engineering, and Service Desk teams to improve the Apple user experience.

• Create technical documentation, standards, and deployment procedures
  

What you'll bring

• 5+ years' experience managing enterprise Apple environments.

• Deep hands‑on experience administering JAMF Pro in production.

• Experience with JAMF Connect, JAMF Protect, and modern Apple endpoint management.

• Strong knowledge of macOS, Apple Business Manager, Automated Device Enrollment, and device lifecycle management.

• Experience integrating Apple devices with Microsoft Entra, Intune Device Compliance, and Platform SSO.

• Strong scripting and automation experience using Shell, JAMF APIs, or similar tools.

• Experience implementing enterprise macOS security and compliance.

• Excellent troubleshooting, communication, and stakeholder management skills.

• JAMF 200/300 certifications are highly desirable.
  

Highly desirable

• Terraform or Infrastructure as Code.

• Installomator or Workbrew.

• Apple Enterprise Support.

• Papercut or FortiClient for Mac.

• Enterprise iPad management.

• Active involvement in the MacAdmins community.

Technology Stack

JAMF Pro, JAMF Connect, JAMF Protect, Apple Business Manager, Microsoft Entra, Microsoft Intune, Platform SSO, Automated Device Enrollment, Shell Scripting, JAMF APIs, Installomator, Workbrew, Terraform, FileVault, Microsoft Defender for Mac, CIS Compliance, macOS, iPadOS.

At Workhuman®, our mission is to bring more humanity to the workplace. We recognize and embrace individual differences and believe that diversity, inclusion, and belonging are essential to our long-term growth and success. We encourage candidates from all backgrounds and experiences to apply—even if you don’t feel you meet every qualification listed above. We’re looking for collaborative, innovative humans with a growth mindset who can bring unique perspectives to our team.

We are also committed to creating an inclusive and accessible application process for all candidates. If you require any accommodations or support during the application or interview process, or encounter any accessibility barriers, please contact us at [e-mail]. We are dedicated to ensuring equal access to opportunities for all individuals.

Workhuman is an Equal Opportunity Employer and is committed to the principle of equal employment opportunity for all employees. We proudly provide a work environment free of discrimination and harassment. Employment decisions at Workhuman are based on solely on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social, or ethnic origin, sex (including pregnancy), age, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, or any other status protected by the laws or regulations in the locations where we operate. Workhuman believes that diversity and inclusion among our teammates is critical to our success as a global company, and we seek to recruit, develop and retain the most talented people from a diverse candidate pool.