Senior macOS System Engineer

Jobot; Charlotte (NC); On-site; USD 110,000 - 125,000; Full time

Job summary

Jobot is seeking a Senior macOS Systems Engineer to own endpoint engineering for a large, distributed enterprise. You will design and optimize macOS platform architecture, automate deployment, and strengthen endpoint security across global devices.

The role requires deep macOS expertise, scripting skills in Bash and Python, and experience with Jamf Pro or similar tools. You will mentor engineers and help set engineering standards.

Qualifications

• Five+ years engineering enterprise macOS environments.
• Hands-on with Jamf Pro or similar tools.
• Experience managing large macOS endpoints across 1000+ devices.

Responsibilities

• Lead macOS endpoint strategy and platform architecture.
• Develop automation and deployment workflows for macOS.
• Ensure security baselines and compliance across endpoints.
• Collaborate with Security, Infrastructure, Identity, Networking teams.
• Mentor engineers and drive best practices.

Skills

macOS administration

Endpoint management

Automation scripting (Bash, Python)

Security hardening

Tools

Jamf Pro

Iru/Kandji

Apple Business Manager

Apple MDM

Job description

Job details: This Jobot Job is hosted by: Amanda Preston Salary: $110,000 - $125,000 per year

A bit about us

We are a large, established organization with a diverse portfolio of businesses and a global technology environment. Our enterprise technology teams build and support the secure, reliable, and modern platforms that enable employees to work effectively across locations and business units. The Endpoint Engineering team is responsible for delivering scalable device-management solutions, strengthening endpoint security, and modernizing the employee technology experience. The team works closely with Information Security, Infrastructure, Identity, Networking, and Support teams to ensure endpoint services remain secure, resilient, and aligned with evolving business needs.

Why join us?

This is an opportunity to serve as a senior technical authority for macOS engineering within a complex, large-scale enterprise environment. You will have the ability to shape endpoint strategy, lead modernization and automation initiatives, and influence how Apple devices are securely managed throughout their lifecycle.

You will join a collaborative technology organization where you can:

• Take ownership of enterprise macOS engineering and platform architecture
• Lead high-impact automation, security, and modernization initiatives
• Work with modern endpoint-management and cloud-identity technologies
• Solve complex technical challenges across a large, distributed environment
• Partner with experienced professionals across Security, Identity, Infrastructure, and Networking
• Mentor other engineers and help establish endpoint-engineering standards and best practices

Job Details

Position Overview

The Senior macOS Systems Engineer is responsible for engineering, maintaining, automating, and securing the organization’s macOS endpoint ecosystem and its supporting infrastructure. This individual will serve as a senior technical resource for macOS device management, endpoint security, automation, and enterprise client-engineering initiatives.

As a member of the Endpoint Engineering team, this role will focus on delivering scalable, secure, and modern management solutions for macOS devices across a global enterprise environment. Responsibilities include endpoint lifecycle management, operating-system deployment, application packaging, software distribution, patch management, security compliance, automation, and platform optimization.

The ideal candidate brings deep macOS platform expertise, strong engineering and scripting capabilities, and the ability to lead complex technical initiatives while maintaining the stability and reliability of critical endpoint services.

Key Responsibilities

Endpoint Engineering and Platform Management

• Serve as the senior macOS subject-matter expert for endpoint-engineering operations, technical initiatives, and escalations.
• Engineer, administer, maintain, and optimize enterprise macOS management platforms, including Jamf Pro and Iru.
• Design scalable endpoint-provisioning and lifecycle-management workflows integrated with cloud-based identity environments.
• Manage macOS operating-system deployment, configuration management, software distribution, and patch-management processes.
• Establish and maintain standardized endpoint configurations across the enterprise.
• Implement and enforce device-compliance policies and enterprise technology standards.
• Evaluate platform capabilities and recommend improvements that enhance scalability, reliability, security, and the employee experience.

Automation and Scripting

• Develop and maintain scripts, tooling, and automated workflows that improve operational efficiency and reduce manual administration.
• Create and maintain application packages, deployment automations, and self-service software-delivery solutions.
• Write advanced Bash and Python scripts supporting device provisioning, compliance, reporting, monitoring, remediation, and lifecycle management.
• Identify opportunities to automate repeatable processes and improve the overall maturity of endpoint operations.
• Build reliable and reusable solutions that can scale across a large enterprise environment.

Security and Compliance

• Partner with Information Security teams to establish and maintain macOS security baselines and endpoint-hardening standards.
• Engineer automated patching, vulnerability-management, and remediation processes.
• Support endpoint-compliance programs and respond to critical vulnerabilities and security incidents.
• Ensure endpoint-management platforms align with enterprise security, auditing, risk, and governance requirements.
• Develop monitoring and reporting capabilities that provide visibility into endpoint health, vulnerabilities, and compliance status.

Infrastructure and Operations

• Monitor the performance, availability, capacity, and overall health of endpoint-management platforms.
• Troubleshoot and resolve complex macOS, endpoint-engineering, and supporting infrastructure issues.
• Maintain and optimize platform architecture in alignment with business growth and operational requirements.
• Lead or participate in platform upgrades, migrations, testing, validation, and enterprise rollout activities.
• Proactively identify technical risks and implement solutions that improve platform stability and resilience.

Collaboration and Technical Leadership

• Provide Tier 3 escalation support to Service Desk and technical support teams.
• Collaborate with Infrastructure, Identity, Networking, Information Security, and other engineering teams to deliver integrated endpoint solutions.
• Partner with business and technology stakeholders to evaluate requirements and implement solutions supporting operational and strategic initiatives.
• Mentor junior engineers and provide technical guidance across the Endpoint Engineering team.
• Lead technical discussions, communicate recommendations, and help drive decisions related to macOS endpoint strategy.

Documentation and Standards

• Create and maintain technical documentation, engineering standards, operational procedures, and platform-architecture materials.
• Document configurations, integrations, automation workflows, troubleshooting procedures, and support processes.
• Contribute to endpoint-engineering governance, best practices, and operational-maturity initiatives.
• Ensure technical documentation remains accurate, accessible, and aligned with the current environment.

Qualifications

Required Experience

• Five or more years of experience supporting and engineering enterprise macOS environments.
• Five or more years of hands-on experience administering Jamf Pro, Iru/Kandji, or comparable Apple device-management platforms.
• Experience managing large-scale endpoint environments supporting at least 1,000 users or devices.
• Experience with modern endpoint-management platforms and cloud-based identity solutions.
• Demonstrated experience leading complex endpoint-engineering, automation, or infrastructure-modernization initiatives.
• Experience providing advanced technical support and resolving escalated enterprise endpoint issues.

Technical Expertise

• Advanced knowledge of macOS administration, configuration, deployment, and troubleshooting.
• Strong experience with Jamf Pro and Iru/Kandji architecture, administration, integrations, and ongoing maintenance.
• Experience with macOS application packaging, software distribution, and deployment methodologies.
• Advanced understanding of endpoint patch-management and vulnerability-remediation practices.
• Strong scripting and automation experience using Bash and Python.
• Working knowledge of Apple Business Manager, Automated Device Enrollment, and Apple MDM technologies.
• Experience integrating endpoint-management platforms with identity providers such as Microsoft Entra ID or Okta.
• Knowledge of certificate-based authentication, conditional access, and modern identity-management concepts.
• Solid understanding of networking fundamentals and the ability to troubleshoot endpoint connectivity issues.
• Experience with ServiceNow, Jira, or similar ticketing and workflow-management platforms.
• Knowledge of endpoint-security best practices and modern cybersecurity principles.
• Experience developing endpoint-compliance, monitoring, inventory, and reporting solutions.

Preferred Qualifications

• Jamf Certified Tech certification or higher, including Jamf 200 or an equivalent current certification.
• Apple platform or Apple device-support certifications.
• Experience implementing cloud-first endpoint-management strategies.
• Familiarity with Microsoft Intune and cross-platform endpoint-management environments.
• Experience with automation frameworks, infrastructure-as-code practices, or API-driven integrations.
• Experience supporting enterprise platform migrations or modernization programs.
• Familiarity with zero-touch provisioning and identity-based device-enrollment workflows.

Key Competencies

• Strong analytical, troubleshooting, and problem-solving abilities
• Automation-first engineering mindset
• Ability to work independently within a complex enterprise environment
• Strong technical communication and documentation skills
• Ability to prioritize and manage multiple concurrent initiatives
• Collaborative approach to cross-functional engineering and operations
• Strong commitment to security, platform reliability, and operational excellence
• Ability to balance long-term engineering improvements with immediate operational needs
• Comfortable providing technical leadership and influencing decisions without direct authority

Jobot is an Equal Opportunity Employer. We provide an inclusive work environment that celebrates diversity and all qualified candidates receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, age (40 and over), disability, military status, genetic information or any other basis protected by applicable federal, state, or local laws. Jobot also prohibits harassment of applicants or employees based on any of these protected categories. It is Jobot’s policy to comply with all applicable federal, state and local laws respecting consideration of unemployment status in making hiring decisions.

Sometimes Jobot is required to perform background checks with your authorization. Jobot will consider qualified candidates with criminal histories in a manner consistent with any applicable federal, state, or local law regarding criminal backgrounds, including but not limited to the Los Angeles Fair Chance Initiative for Hiring and the San Francisco Fair Chance Ordinance.

Information collected and processed as part of your Jobot candidate profile, and any job applications, resumes, or other information you choose to submit is subject to Jobot's Privacy Policy, as well as the Jobot California Worker Privacy Notice and Jobot Notice Regarding Automated Employment Decision Tools which are available at jobot.com/legal.

By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Jobot, and/or its agents and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here: jobot.com/privacy-policy