Title: Level 3 Mac Desktop Engineer (Jamf/ M365/Endpoint Management) Company: Established Scientific Organization Job ID: 627 Position Type: Contract (with extensions) Pay rate: $33 - $35.50/hour based on skills and experience Hybrid role in Washington DC (2-3 days/week onsite, rest remote The hiring manager is looking for someone with Mac Desktop skills who has hands-on experience from start to finish from initiation of project to builds and deployment Job Summary: We are seeking an experienced and proactive Level 3 Mac Desktop Engineer to join our Workplace Technology team. This role is ideal for a solution-driven professional who not only supports Mac users at an advanced level but also architects and improves endpoint management systems with a focus on scalability, automation, and security. You will serve as a subject matter expert (SME) for macOS, Jamf Pro, and Microsoft 365 within the enterprise environment, and play a critical role in enhancing the end-user experience through strategic IT initiatives. Qualifications: • 5+ years of hands-on experience supporting and managing macOS in a medium-to-large enterprise setting. • Expert-level proficiency with Jamf Pro administration, including advanced policy creation, smart groups, patch management, and extension attributes. • Strong understanding of macOS system internals, security frameworks, and enterprise deployment models. • Proficiency in scripting languages (e.g., Bash, Python, AppleScript or others) and experience automating repetitive IT tasks. • Familiarity with MDM/APNs, Apple Business Manager, DEP, and VPP. • In-depth knowledge of Microsoft 365 administration and integration in cross-platform environments. • Strong analytical, communication, and customer service skills. • Certifications such as Jamf 300+, Apple Certified Support Professional (ACSP), or Certified IT Professional (CompTIA, ITIL) are a strong plus. Preferred Skills: • Experience integrating Jamf Pro with identity providers (e.g., CyberArk, Azure AD). • Familiarity with Zero-Touch deployment workflows. • Experience with security tools and policies for endpoint protection (e.g., FileVault, CrowdStrike, SentinelOne). • Working knowledge of Windows 10/11, particularly in mixed OS environments, to support collaboration with Windows fleet management and cross-platform issues. • Strong understanding of Microsoft 365 administration, including policy management, endpoint compliance, and integration with macOS. Key Responsibilities: • Strategic Endpoint Management: Lead the development and lifecycle management of Mac endpoints using Jamf Pro, with a focus on automation, standardization, and security compliance. • Jamf Pro Ownership: Own the architecture, configuration, and enhancement of our Jamf Pro instance. Develop custom policies, profiles, and packages to support business needs. • Application Packaging & Deployment: Package and maintain applications for deployment via Jamf. Ensure software is up to date, tested, and compliant with organizational standards and licensing requirements. • Automation & Scripting: Design and implement automation using Bash, Python, or AppleScript to streamline provisioning, patching, and incident resolution workflows. • Advanced Troubleshooting & Escalation: Act as the final escalation point for complex Mac-related incidents and systemic issues. Perform root cause analysis and long-term resolution planning. • Security & Compliance: Collaborate with InfoSec to enforce macOS security baselines (e.g., CIS benchmarks) and manage encrypted deployments, device hardening, and compliance reporting via Jamf and other tools. • Cross-Platform Integration: Partner with Windows and SaaS teams to ensure seamless integration across platforms and identity systems (e.g., CyberArk, Azure AD, Active Directory). • Microsoft 365 & SaaS Administration: Provide advanced support and policy management within M365 and other critical cloud SaaS platforms as they relate to macOS endpoints. • Lifecycle & Asset Management: Implement and maintain lifecycle processes for Apple devices from procurement through decommission, integrating asset tracking and compliance monitoring. • Documentation & Enablement: Create and maintain thorough documentation, workflows, and training resources for IT staff and end-users. Provide mentoring and technical guidance to junior team members. • Project Leadership: Lead or contribute to IT projects involving system upgrades, new technology rollouts, and endpoint security initiatives.