This is a fully onsite role in Washington DC

*Must be local - Applications with locations outside of the area will be rejected.

Job Summary:

We are seeking an experienced and proactive Level 3 Mac Desktop Engineer to join our Workplace Technology team. This role is ideal for a solution-driven professional who not only supports Mac users at an advanced level but also architects and improves endpoint management systems with a focus on scalability, automation, and security. You will serve as a subject matter expert (SME) for macOS, Jamf Pro, and Microsoft 365 within the enterprise environment, and play a critical role in enhancing the end-user experience through strategic IT initiatives.

Key Responsibilities:

• Strategic Endpoint Management: Lead the development and lifecycle management of Mac endpoints using Jamf Pro, with a focus on automation, standardization, and security compliance.
• Jamf Pro Ownership: Own the architecture, configuration, and enhancement of our Jamf Pro instance. Develop custom policies, profiles, and packages to support business needs.
• Application Packaging & Deployment: Package and maintain applications for deployment via Jamf. Ensure software is up to date, tested, and compliant with organizational standards and licensing requirements.
• Automation & Scripting: Design and implement automation using Bash, Python, or AppleScript to streamline provisioning, patching, and incident resolution workflows.
• Advanced Troubleshooting & Escalation: Act as the final escalation point for complex Mac-related incidents and systemic issues. Perform root cause analysis and long-term resolution planning.
• Security & Compliance: Collaborate with InfoSec to enforce macOS security baselines (e.g., CIS benchmarks) and manage encrypted deployments, device hardening, and compliance reporting via Jamf and other tools.
• Cross-Platform Integration: Partner with Windows and SaaS teams to ensure seamless integration across platforms and identity systems (e.g., CyberArk, Azure AD, Active Directory).
• Microsoft 365 & SaaS Administration: Provide advanced support and policy management within M365 and other critical cloud SaaS platforms as they relate to macOS endpoints.
• Lifecycle & Asset Management: Implement and maintain lifecycle processes for Apple devices from procurement through decommission, integrating asset tracking and compliance monitoring.
• Documentation & Enablement: Create and maintain thorough documentation, workflows, and training resources for IT staff and end-users. Provide mentoring and technical guidance to junior team members.
• Project Leadership: Lead or contribute to IT projects involving system upgrades, new technology rollouts, and endpoint security initiatives.

Qualifications:

• 5+ years of hands-on experience supporting and managing macOS in a medium-to-large enterprise setting.
• Expert-level proficiency with Jamf Pro administration, including advanced policy creation, smart groups, patch management, and extension attributes.
• Strong understanding of macOS system internals, security frameworks, and enterprise deployment models.
• Proficiency in scripting languages (e.g., Bash, Python) and experience automating repetitive IT tasks.
• Familiarity with MDM/APNs, Apple Business Manager, DEP, and VPP.
• In-depth knowledge of Microsoft 365 administration and integration in cross-platform environments.
• Strong analytical, communication, and customer service skills.
• Certifications such as Jamf 300+, Apple Certified Support Professional (ACSP), or Certified IT Professional (CompTIA, ITIL) are a strong plus.

Preferred Skills:

• Experience integrating Jamf Pro with identity providers (e.g., CyberArk, Azure AD).
• Familiarity with Zero-Touch deployment workflows.
• Experience with security tools and policies for endpoint protection (e.g., FileVault, CrowdStrike, SentinelOne).
• Working knowledge of Windows 10/11, particularly in mixed OS environments, to support collaboration with Windows fleet management and cross-platform issues.
• Strong understanding of Microsoft 365 administration, including policy management, endpoint compliance, and integration with macOS.