Systems Engineering Senior Specialist

Role Overview

We are seeking an experienced Senior Systems Engineering Specialist with strong expertise in Apple macOS endpoint management using Microsoft Intune. The role will act as a technical SME and L3 escalation point for enterprise macOS environments, responsible for device lifecycle management, compliance enforcement, security configuration, application deployment, and endpoint modernization initiatives.

The ideal candidate will possess deep knowledge of macOS administration, Microsoft Intune, Apple Business Manager (ABM), Automated Device Enrollment (ADE), Conditional Access, endpoint security, and automation. The individual will work closely with security, identity, service delivery, and infrastructure teams to ensure a secure, compliant, and seamless end-user experience.

---

Key Responsibilities

macOS Endpoint Management

• Administer and manage enterprise macOS devices through Microsoft Intune.
• Design and implement device enrollment strategies using Apple Business Manager (ABM) and Automated Device Enrollment (ADE).
• Manage the complete macOS lifecycle including provisioning, configuration, compliance, patching, retirement, and asset management.
• Configure and maintain device restriction policies, configuration profiles, Wi-Fi profiles, VPN settings, certificates, and software deployment policies.
• Support zero-touch deployment and automated provisioning initiatives.

Microsoft Intune Administration

• Design and implement Intune device compliance and configuration policies for macOS devices.
• Manage device groups, dynamic assignments, application deployment, and software update policies.
• Configure and maintain Conditional Access integrations with Microsoft Entra ID.
• Deploy and manage Company Portal and self-service application delivery models.
• Utilize Intune reporting and analytics to improve endpoint health and compliance.

Security & Compliance

• Implement security baselines and hardening standards for macOS endpoints.
• Manage FileVault encryption deployment and recovery key management.
• Support Microsoft Defender for Endpoint integration on macOS.
• Configure compliance policies aligned with organizational security requirements.
• Perform remediation of non-compliant devices and security findings.
• Support audit, governance, and compliance initiatives.

Application & Patch Management

• Package, deploy, update, and retire applications on macOS devices.
• Manage App Store, Line-of-Business (LOB), and PKG application deployments through Intune.
• Oversee macOS operating system updates and application patching.
• Troubleshoot software deployment failures and policy conflicts.
• Ensure application lifecycle governance and compliance.

Incident & Problem Management

• Act as an L3 escalation point for complex macOS and Intune-related incidents.
• Perform root cause analysis and implement preventive solutions.
• Troubleshoot enrollment issues, compliance failures, certificate problems, application deployment issues, and Conditional Access challenges.
• Participate in major incident and change management activities.

Automation & Continuous Improvement

• Develop automation solutions using PowerShell, Shell scripting, and Microsoft Graph API where appropriate.
• Implement proactive remediation and monitoring solutions.
• Drive operational improvements, process standardization, and service optimization initiatives.
• Create and maintain technical documentation, SOPs, troubleshooting guides, and knowledge articles.

Stakeholder Management

• Collaborate with security, infrastructure, networking, and identity teams.
• Participate in customer governance and operational review meetings.
• Provide technical guidance and mentoring to junior engineers.
• Support transition, transformation, and modernization projects.

---

Required Technical Skills

Primary Skills

• Microsoft Intune (macOS Management)
• macOS Administration
• Apple Business Manager (ABM)
• Apple Automated Device Enrollment (ADE/DEP)
• Microsoft Entra ID (Azure AD)
• Conditional Access
• Microsoft Defender for Endpoint
• Apple MDM Framework

Endpoint Management

• Device Compliance Policies
• Configuration Profiles
• Endpoint Security Policies
• Application Deployment
• Device Lifecycle Management
• Zero-Touch Provisioning
• Company Portal Administration

Operating Systems

• macOS Ventura / Sonoma and later
• iOS / iPadOS (basic administration knowledge)
• Windows Endpoint Management (good understanding)

Automation & Scripting

• PowerShell
• Shell/Bash Scripting
• Microsoft Graph API
• Automation and Remediation Scripting

ITSM & Processes

• ServiceNow (preferred)
• Incident Management
• Problem Management
• Change Management
• ITIL Framework

---

Preferred Certifications

• Microsoft Certified: Endpoint Administrator Associate (MD-102)
• Microsoft Azure Fundamentals (AZ-900)
• Microsoft Azure Administrator (AZ-104)
• Apple Device Support
• Apple Deployment & Management
• ITIL Foundation Certification

---

Soft Skills

• Strong customer-facing communication skills
• Excellent troubleshooting and analytical thinking
• Ability to operate independently in enterprise environments
• Strong documentation and process management skills
• Experience mentoring junior engineers
• Ability to work in global support and cross-functional teams