Job Overview
We are seeking a highly skilled and proactive Apple/MAC OS SME – This is a remote opportunity
Note: You must have experience with enterprise macOS management and security baselines
Role:
Owns macOS endpoint baseline, Apple Business Manager/JAMF enrollment, FileVault recovery key escrow, macOS imaging/provisioning, macOS Unified Logs, EDR/logging agent validation, VDI/remote access compatibility, patching, rollback, and macOS-specific runbooks.
Must Have:
- Active Top Secret clearance
- JAMF Pro
- Apple Business Manager
- macOS endpoint management
- FileVault key escrow
- macOS Unified Logs
- Image/provisioning automation
- MacOS patching and compliance reporting
- EDR/logging agent deployment
- Secure wipe/decommission procedures
- Documentation and knowledge transfer.
Duties
-
macOS Endpoint Baselines: Engineer, maintain, validate, and document secure macOS endpoint baseline configurations for CBO-issued devices, including settings required for on-site access, remote access, VDI connectivity, security agents, authentication, logging, compliance posture, and operational continuity.
·Apple Business Manager and JAMF Enrollment: Support Apple Business Manager and JAMF Pro enrollment workflows, device assignment, automated provisioning, configuration profile deployment, compliance enforcement, enrollment status tracking, and documentation of device enrollment and provisioning procedures.
· macOS Provisioning and Lifecycle Management: Support provisioning, reassignment, decommissioning, secure wipe, lifecycle tracking, device-to-user association, asset inventory reconciliation, and custody documentation for macOS endpoints.
· FileVault and Recovery Key Management: Support FileVault configuration, recovery key escrow, validation, access control, documentation, and lifecycle procedures for CBO macOS devices in accordance with CBO-approved security requirements.
· macOS Patching and Compliance: Support macOS operating system and application patching, version control, compliance reporting, post-patch validation, rollback documentation, configuration drift remediation, and change records for assigned macOS endpoint activities.
· EDR, Logging, and Telemetry: Support deployment, validation, and reporting of EDR, AV, and logging agents on macOS endpoints; macOS Unified Log collection and validation; SIEM/EDR forwarding; telemetry health checks; audit trails; alert threshold documentation; and remediation of reporting gaps.
· VDI and Remote Access Compatibility: Support macOS endpoint configurations required for VDI, VPN, remote access, on-site access, authentication, device posture validation, and secure user connectivity to CBO-approved environments.
· Assessment-to-Remediation Support: Produce or support technical findings, remediation plans, implementation steps, validation criteria, rollback procedures, change documentation, validation reports, and change logs for macOS endpoint, enrollment, telemetry, patching, and lifecycle engineering activities.
· Documentation, Runbooks, and Knowledge Transfer: Develop and maintain macOS-focused baseline documentation, enrollment workflows, patching and rollback procedures, troubleshooting guides, knowledge-base materials, operational runbooks, and handoff materials for CBO Service Desk, IAM, SOC, and IRM personnel.
Work Location: Remote
