Desktop Engineer

Job description

This is a hybrid opportunity out of Washington, DC

Key Responsibilitie

Strategic Endpoint Management: Lead the development and lifecycle management of Mac endpoints using Jamf Pro, with a focus on automation, standardization, and security complianceJamf Pro Ownership: Own the architecture, configuration, and enhancement of our Jamf Pro instance. Develop custom policies, profiles, and packages to support business needsApplication Packaging & Deployment: Package and maintain applications for deployment via Jamf. Ensure software is up to date, tested, and compliant with organizational standards and licensing requirementsAutomation & Scripting: Design and implement automation using Bash, Python, or AppleScript to streamline provisioning, patching, and incident resolution workflowAdvanced Troubleshooting & Escalation: Act as the final escalation point for complex Mac-related incidents and systemic issues. Perform root cause analysis and long-term resolution planningSecurity & Compliance: Collaborate with InfoSec to enforce macOS security baselines (e.g., CIS benchmarks) and manage encrypted deployments, device hardening, and compliance reporting via Jamf and other toolsCross-Platform Integration: Partner with Windows and SaaS teams to ensure seamless integration across platforms and identity systems (e.g., CyberArk, Azure AD, Active Directory)Microsoft 365 & SaaS Administration: Provide advanced support and policy management within M365 and other critical cloud SaaS platforms as they relate to macOS endpointsLifecycle & Asset Management: Implement and maintain lifecycle processes for Apple devices from procurement through decommission, integrating asset tracking and compliance monitoringDocumentation & Enablement: Create and maintain thorough documentation, workflows, and training resources for IT staff and end-users. Provide mentoring and technical guidance to junior team membersProject Leadership: Lead or contribute to IT projects involving system upgrades, new technology rollouts, and endpoint security initiatives

Qualifications

5+ years of hands-on experience supporting and managing macOS in a medium-to-large enterprise settingExpert-level proficiency with Jamf Pro administration, including advanced policy creation, smart groups, patch management, and extension attributesStrong understanding of macOS system internals, security frameworks, and enterprise deployment modelsProficiency in scripting languages (e.g., Bash, Python) and experience automating repetitive IT tasksFamiliarity with MDM/APNs, Apple Business Manager, DEP, and VPP.In-depth knowledge of Microsoft 365 administration and integration in cross-platform environmentsStrong analytical, communication, and customer service skillsCertifications such as Jamf 300+, Apple Certified Support Professional (ACSP), or Certified IT Professional (CompTIA, ITIL) are a strong plus

Preferred Skills

Experience integrating Jamf Pro with identity providers (e.g., CyberArk, Azure AD).Familiarity with Zero-Touch deployment workflows.Experience with security tools and policies for endpoint protection (e.g., FileVault, CrowdStrike, SentinelOne).Working knowledge of Windows 10/11, particularly in mixed OS environments, to support collaboration with Windows fleet management and cross-platform issues.Strong understanding of Microsoft 365 administration, including policy management, endpoint compliance, and integration with macOS.