Senior macOS Endpoint Engineer: Secure Images & JAMF Expert

Socket.dev; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Socket.dev is seeking a macOS Engineer to design, build, and harden macOS workstation images for on-site and remote/VDI use, with secure baseline configurations and lifecycle controls.

The role administers JAMF Pro and Apple Business Manager enrollment, supports provisioning, patching, and logging, and integrates endpoints with VDI and SIEM/EDR platforms. A Top Secret clearance and 8+ years in IT are required.

Qualifications

• Bachelor’s degree preferred; equivalent experience acceptable.
• Active or interim Top Secret security clearance.
• 8+ years IT/Endpoint Engineering or Cybersecurity.
• 6+ years engineering in enterprise environments.

Responsibilities

• Design, build, and harden macOS workstation images for on-site and remote/VDI use.
• Engineer secure baseline configurations and lifecycle controls.
• Administer JAMF Pro and Apple Business Manager workflows.
• Support provisioning, policy deployment, software distribution, and patching.
• Integrate macOS endpoints with VDI, authentication agents, and logging tools.
• Support passwordless authentication and hardware-backed credentials where approved.
• Configure macOS logging/telemetry and forward to SIEM/EDR platforms.
• Develop runbooks for imaging, enrollment, patch validation, and recovery.
• Assist with audit readiness and post-change validation for endpoints.
• Provide guidance on macOS architecture and security posture.

Skills

macOS image engineering

Baseline configurations

JAMF Pro administration

Apple Business Manager

VDI integration

patching and compliance

logging and SIEM/EDR

forensic support and audit

passwordless authentication

Education

Bachelor's degree in IT, Cybersecurity, or related field

Tools

JAMF Pro

Apple Business Manager

SIEM/EDR tooling

Job description

Socket.dev is seeking a macOS Engineer to design, build, and harden macOS workstation images for on-site and remote/VDI use, with secure baseline configurations and lifecycle controls.

The role administers JAMF Pro and Apple Business Manager enrollment, supports provisioning, patching, and logging, and integrates endpoints with VDI and SIEM/EDR platforms. A Top Secret clearance and 8+ years in IT are required.