The Opportunity

We're looking for a Senior Mac Systems Engineer to lead the design, management, security, and evolution of Workhuman's enterprise Apple environment.

This is a hybrid role based in Framingham, with three days per week in the office.

As part of our Infrastructure team, you'll own our Apple endpoint platform, with responsibility for JAMF Pro, Apple Business Manager, macOS security, identity integration, automation, and modern deployment practices. You'll work closely with Infrastructure, Information Security, Workplace Technology, and Endpoint Engineering to deliver a secure, scalable, and seamless Apple experience for employees globally.

This is an exciting opportunity to shape the future of our Apple platform, drive automation, and lead key initiatives including zero-touch deployment, Platform SSO, and endpoint security.

What we can offer you

• Ownership of our enterprise Apple endpoint platform.

• Opportunity to lead the evolution of our JAMF Pro environment and modern Mac deployment strategy.

• Drive automation using scripting, JAMF APIs, and Infrastructure as Code.

• Work closely with Infrastructure, Security, and Workplace Technology on strategic initiatives.

• Lead projects focused on security, identity integration, and endpoint modernisation.

• A collaborative engineering culture that values innovation and continuous improvement.

Responsibilities

• Own and administer our JAMF Pro environment, including JAMF Connect, JAMF Protect, and Apple endpoint management.

• Design and support secure macOS and iPadOS deployment, lifecycle management, software delivery, and patching.

• Implement and maintain Apple Business Manager, Automated Device Enrollment, Platform SSO, and Microsoft Entra integration.

• Develop JAMF policies, configuration profiles, Smart Groups, automation, and software packaging.

• Improve endpoint security through FileVault, CIS compliance, Microsoft Defender for Mac, and JAMF Protect.

• Build automation using Shell scripting, JAMF APIs, Installomator, Workbrew, Terraform, or similar tools.

• Provide technical leadership and advanced troubleshooting across the Apple platform.

• Partner with Security, Infrastructure, Endpoint Engineering, and Service Desk teams to improve the Apple user experience.

• Create technical documentation, standards, and deployment procedures

What you'll bring

• 5+ years' experience managing enterprise Apple environments.

• Deep hands-on experience administering JAMF Pro in production.

• Experience with JAMF Connect, JAMF Protect, and modern Apple endpoint management.

• Strong knowledge of macOS, Apple Business Manager, Automated Device Enrollment, and device lifecycle management.

• Experience integrating Apple devices with Microsoft Entra, Intune Device Compliance, and Platform SSO.

• Strong scripting and automation experience using Shell, JAMF APIs, or similar tools.

• Experience implementing enterprise macOS security and compliance.

• Excellent troubleshooting, communication, and stakeholder management skills.

• JAMF 200/300 certifications are highly desirable.

Highly desirable

• Terraform or Infrastructure as Code.

• Installomator or Workbrew.

• Apple Enterprise Support.

• Papercut or FortiClient for Mac.

• Enterprise iPad management.

• Active involvement in the MacAdmins community.

Technology Stack

JAMF Pro, JAMF Connect, JAMF Protect, Apple Business Manager, Microsoft Entra, Microsoft Intune, Platform SSO, Automated Device Enrollment, Shell Scripting, JAMF APIs, Installomator, Workbrew, Terraform, FileVault, Microsoft Defender for Mac, CIS Compliance, macOS, iPadOS.

The base salary range for this position is $113,000 to $135,000. Offered base compensation within this range will be determined based on the candidate’s qualifications, experience, geographic location, and other factors relevant to the scope and responsibilities of this role.

This role is also eligible for bonus or other variable compensation based on job performance and our standard benefits package, which supports employee well-being and work-life balance.

Thank you for considering joining our team. We strive to create an inclusive and accessible application process for all candidates. If you encounter any difficulties or have specific accessibility requirements while applying for this position, please don't hesitate to reach out to us at globalrecruitment@workhuman.com for assistance. We are committed to ensuring equal access to opportunities for all individuals.