System Administrator, macOS

Nakupuna Companies; Aberdeen (MD); On-site; USD 95,000 - 125,000; Full time

Job summary

Nakupuna Companies is seeking a System Administrator, macOS, to install, configure, secure, and support enterprise macOS systems and related endpoint management tools. The role involves managing GovCloud and networks like NIPRNET and JWICS, with a focus on compliance with DISA STIGs and NIST guidance.

The candidate will administer ABM/ASM/ADE/MDM platforms (Jamf Pro, Kandji, Mosyle, Intune, Workspace ONE) for zero-touch deployment and policy enforcement, develop automation, and maintain system

Qualifications

• Bachelor’s degree or equivalent in computer science, IT, or related field.

Responsibilities

• Install and configure current and legacy macOS systems with enterprise endpoint configurations.
• Monitor system performance and availability.
• Implement system security measures and review logs.
• Administer ABM/ASM/ADE/MDM platforms for zero-touch deployment and policy enforcement.
• Develop automation using bash, zsh, Python, or AppleScript.

Skills

macOS administration

End-user support

Enterprise security awareness

Scripting (bash/zsh/python)

Education

Bachelor’s degree in computer science, IT, or related field

Security+ CE

ACSP/ACITP

Tools

Jamf Pro

Kandji

Mosyle

Microsoft Intune

Workspace ONE

Apple Business Manager (ABM)

Active Directory

Azure AD/Microsoft Entra ID

Job description

Overview

Nakupuna Solutions is seeking a System Administrator, macOS. The System Administrator, macOS is responsible for installing, configuring, securing, and supporting enterprise Apple macOS systems and related endpoint management technologies to ensure availability, performance, and security. This role may involve managing GovCloud environments, standalone environments, and systems connected to external networks such as NIPRNET, SIPRNET, DREN, JWICS, and NSA.

Responsibilities

System Management

• Install and configure current and legacy macOS systems, including system preferences, permissions, Terminal, bash/zsh, shell scripting, and enterprise endpoint configurations. Ensure configurations comply with C5ISR policies and procedures across DREN, NIPRNET, SIPRNET, JWICS, laboratory networks, and other supported environments.
• Monitor system performance and availability.
• Implement system security measures, review logs, and identify issues.
• Administer Apple Business Manager (ABM), Apple School Manager (ASM), Automated Device Enrollment (ADE), Volume Purchase Program (VPP), and Mobile Device Management (MDM) platforms such as Jamf Pro, Kandji, Mosyle, Microsoft Intune, or Workspace ONE for zero-touch deployment, configuration profiles, policy enforcement, and device management.
• Provide administration, planning, and execution support for Amazon Web Services and Microsoft Azure environments.
• Develop automation using bash, zsh, Python, or AppleScript and support software packaging using .pkg and .dmg installers.
• Maintain system documentation.
• Conduct operating system, application, and security patch management.

Infrastructure Support

• Configure and maintain storage systems.
• Provision, deploy, inventory, maintain, and decommission Apple devices throughout their lifecycle.
• Configure identity integration with Active Directory, Microsoft Entra ID (Azure AD), Okta, SSO, and Platform SSO.
• Support networking services including DNS, DHCP, VPN, Wi‑Fi, and certificate management.
• Coordinate support requests with the Network Enterprise Center (NEC) regarding provisioning, performance, resource allocation, and related requests.
• Ensure managed systems comply with DISA STIGs, SRGs, CIS Benchmarks, NIST guidance, and other cybersecurity requirements while supporting FileVault, Gatekeeper, XProtect, CrowdStrike, SentinelOne, Apple Silicon (M‑series), Intel hardware, Apple warranty, and AppleCare processes.
• Coordinate with the DREN Network Operations Center (NOC) and Security, Network, and Identity and Access Management (IAM) teams as required.

Technical Support

• Provide Tier 2/3 support for macOS hardware, operating systems, enterprise applications, and software conflicts.
• Support ACAS scans, IA vulnerability compliance, endpoint protection, cybersecurity requirements, and remediation activities.
• Apply operating system and security patches to maintain compliance.
• Troubleshoot hardware, software, networking, authentication, certificate, and application issues using root‑cause analysis.
• Develop automation workflows, maintain runbooks, SOPs, and knowledge‑base documentation, communicate technical issues to non‑technical users, and independently prioritize assigned work.

Qualifications

Education and Experience

• Bachelor’s degree in computer science, IT, or related field
• Required certifications including:
• Security+ CE
• Apple Certified Support Professional (ACSP) or Apple Certified IT Professional (ACITP)
• Other certifications desired but not required, such as:
• Jamf Certified Technician, Administrator, or Expert
• CompTIA A+
• CompTIA Network+
• SecurityX / CASP+
• CCNP Security
• CISA
• FITSP‑O
• GICSP
• SSCP
• 3+ years of desktop or endpoint support with macOS administration focus
• Experience with enterprise MDM solutions, Apple Business Manager

Clearance Requirements: Active Secret security clearance required. Must be a U.S. citizen.

Location: Aberdeen Proving Ground, MD

Physical Requirements

• Ability to perform repetitive motions with the hands, wrists, and fingers.
• Ability to engage in and follow audible communications in emergencies.
• Ability to sit for prolonged periods at a desk and work on a computer.

The Nakupuna Companies use a market-based compensation strategy to ensure that our employees are compensated within applicable market ranges commensurate with multiple factors, including but not limited to the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract‑specific affordability, organizational requirements, and position location. The projected compensation range for this position is $95,000.00 to $125,000.00 (annualized USD). The salary range displayed represents the typical salary range for this position and is just one component of Nakupuna Companies total compensation package for employees.