JAMF L3 Engineer

Job description

Job Summary

We are seeking a highly skilled JAMF L3 Engineer to manage, support, and optimize enterprise device management environments. The ideal candidate will possess strong expertise in JAMF Pro, macOS administration, endpoint security, automation, and enterprise mobility management (EMM/UEM) solutions. The role requires advanced troubleshooting capabilities, architecture knowledge, and experience supporting large-scale deployments.

Key Responsibilities

JAMF Administration & Engineering

Design, implement, and maintain JAMF Pro infrastructure.

Configure and manage macOS, iOS, and iPadOS devices using JAMF Pro.

Create and maintain configuration profiles, policies, smart groups, and automated workflows.

Manage Business Manager (ABM) integration and Automated Device Enrollment (ADE).

Endpoint Management

Manage software deployment, patch management, OS upgrades, and security updates.

Support device lifecycle management including provisioning, enrollment, compliance, and decommissioning.

Implement and maintain Zero-Touch deployment processes.

Technical Support & Troubleshooting

Act as Level 3 escalation point for JAMF and macOS-related incidents.

Perform root cause analysis (RCA) and implement permanent fixes.

Troubleshoot complex issues involving:

o JAMF Pro

o macOS

o Business Manager

o Authentication and SSO

o Certificates

o Endpoint security tools

Security & Compliance

Implement security baselines and compliance policies.

Ensure device compliance with organizational and regulatory requirements.

Integrate JAMF with security solutions such as:

o Microsoft Intune

o Microsoft Defender

o CrowdStrike

o Okta

o Azure AD / Entra ID

Automation & Scripting

Develop automation solutions using:

o Bash

o Shell Scripting

o Python

o Script

Automate deployment, compliance checks, and reporting activities.

Documentation & Governance

Create and maintain SOPs, runbooks, technical documentation, and knowledge articles.

Participate in change management, problem management, and release activities.

Provide technical guidance and mentoring to L1/L2 support teams.

Mandatory Skills

5-10 years of IT Infrastructure/Endpoint Management experience.

3+ years of hands-on JAMF Pro administration experience.

Strong macOS administration and troubleshooting experience.

Experience with Business Manager (ABM).

Experience with JAMF Pro deployment and integration.

Knowledge of enterprise endpoint management and device security.

Experience in software packaging and patch management.

Strong scripting skills (Bash/Shell/Python).

Experience with Active Directory, Azure AD/Entra ID, LDAP, and SSO.

Knowledge of ITIL processes (Incident, Change, Problem Management).

Preferred Skills

Experience with Microsoft Intune and co-management.

Knowledge of Okta, Microsoft Defender, CrowdStrike, or related security platforms.

Experience in cloud technologies and MDM/UEM ecosystems.

Understanding compliance frameworks such as SOC, ISO 27001, HIPAA, or PCI-DSS.

Certifications (Preferred)

JAMF 200/300/400 Certification.

Device Support Certification.

Deployment and Management Certification.

ITIL Foundation Certification.

Microsoft Endpoint Administrator Certification.

Soft Skills

Strong analytical and troubleshooting skills.

Excellent written and verbal communication.

Ability to work independently in a 24x7 enterprise support environment.

Strong stakeholder management and customer-facing skills.

Ability to lead technical discussions and provide architectural recommendations

Work Authorization

Applicants must be legally authorized to work in the United States.

Equal Employment Opportunity

Themesoft Inc is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.

Email me for prompt response.