Job Overview

We are seeking a highly skilled and proactive Apple/MAC OS SME – This is a remote opportunity
Note: You must have experience with enterprise macOS management and security baselines

Role:

Owns macOS endpoint baseline, Apple Business Manager/JAMF enrollment, FileVault recovery key escrow, macOS imaging/provisioning, macOS Unified Logs, EDR/logging agent validation, VDI/remote access compatibility, patching, rollback, and macOS-specific runbooks.

Must Have:

• Active Top Secret clearance
• JAMF Pro
• Apple Business Manager
• macOS endpoint management
• FileVault key escrow
• macOS Unified Logs
• Image/provisioning automation
• MacOS patching and compliance reporting
• EDR/logging agent deployment
• Secure wipe/decommission procedures
• Documentation and knowledge transfer.

Duties

• macOS Endpoint Baselines: Engineer, maintain, validate, and document secure macOS endpoint baseline configurations for CBO-issued devices, including settings required for on-site access, remote access, VDI connectivity, security agents, authentication, logging, compliance posture, and operational continuity.

·Apple Business Manager and JAMF Enrollment: Support Apple Business Manager and JAMF Pro enrollment workflows, device assignment, automated provisioning, configuration profile deployment, compliance enforcement, enrollment status tracking, and documentation of device enrollment and provisioning procedures.

· macOS Provisioning and Lifecycle Management: Support provisioning, reassignment, decommissioning, secure wipe, lifecycle tracking, device-to-user association, asset inventory reconciliation, and custody documentation for macOS endpoints.

· FileVault and Recovery Key Management: Support FileVault configuration, recovery key escrow, validation, access control, documentation, and lifecycle procedures for CBO macOS devices in accordance with CBO-approved security requirements.

· macOS Patching and Compliance: Support macOS operating system and application patching, version control, compliance reporting, post-patch validation, rollback documentation, configuration drift remediation, and change records for assigned macOS endpoint activities.

· EDR, Logging, and Telemetry: Support deployment, validation, and reporting of EDR, AV, and logging agents on macOS endpoints; macOS Unified Log collection and validation; SIEM/EDR forwarding; telemetry health checks; audit trails; alert threshold documentation; and remediation of reporting gaps.

· VDI and Remote Access Compatibility: Support macOS endpoint configurations required for VDI, VPN, remote access, on-site access, authentication, device posture validation, and secure user connectivity to CBO-approved environments.

· Assessment-to-Remediation Support: Produce or support technical findings, remediation plans, implementation steps, validation criteria, rollback procedures, change documentation, validation reports, and change logs for macOS endpoint, enrollment, telemetry, patching, and lifecycle engineering activities.

· Documentation, Runbooks, and Knowledge Transfer: Develop and maintain macOS-focused baseline documentation, enrollment workflows, patching and rollback procedures, troubleshooting guides, knowledge-base materials, operational runbooks, and handoff materials for CBO Service Desk, IAM, SOC, and IRM personnel.

Work Location: Remote