Engineer, configure, and optimize endpoint environments across Windows, macOS, Ubuntu, iOS, and Android platforms.
Manage enterprise MDM platforms including JAMF Pro, Microsoft Intune, Autopilot, Entra ID, and Active Directory.
Lead endpoint patching strategies for OS and third-party applications, minimizing downtime while ensuring compliance.
Champion ITIL-aligned process improvement, embedding AI and agentic automation to drive continuous operational efficiency.
Serve as a subject matter expert during audits, incident response, and vulnerability remediation exercises.
Architect, deploy, and administer JAMF Pro across a complex enterprise environment of 3,000+ macOS endpoints.
Build automated workflows for device provisioning, application deployment, patch management, and compliance reporting.
Develop and maintain scripts in Bash, Python, AppleScript, and PowerShell to extend and automate JAMF functionality.
Manage JAMF configuration profiles, policies, smart groups, and operational dashboards.
Partner with Security to enforce FileVault encryption, CIS benchmark hardening, and Zero Trust policy controls.
Maintain Apple Business Manager (ABM/DEP), VPP licensing, APNs certificates, and MDM enrollment pipelines.
Design and deploy AI-assisted endpoint automation pipelines to reduce manual operational overhead and accelerate response times.
Build and maintain autonomous agents (LangChain, AutoGen, or custom LLM integrations) to handle routine endpoint tasks including compliance checks, self-healing workflows, and incident triage.
Integrate LLM APIs into endpoint tooling for natural-language policy authoring, log analysis, and intelligent alert summarization.
Develop event-driven automation using JAMF Pro webhooks, Microsoft Power Automate, or custom Python/API pipelines to trigger remediation workflows without manual intervention.
Evaluate and adopt AIOps platforms to predict device health issues, proactively surface compliance drift, and optimize patch scheduling.
Define an AI automation roadmap for endpoint operations, establishing governance, testing, and rollback standards for agentic workflows.
Continuously assess emerging AI tooling and agent frameworks for applicability to endpoint management use cases.
Integrate endpoint tooling with SIEM and SOAR platforms for proactive threat monitoring and automated incident response.
Design and enforce Conditional Access policies, identity frameworks, and data loss prevention controls.
Ensure endpoint posture meets regulatory requirements including GDPR, HIPAA, and PCI-DSS.
Participate in Zero Trust architecture reviews, risk assessments, and compliance audits.
Implement and validate encryption standards across platforms (BitLocker for Windows, FileVault for macOS).
Mentor junior engineers through knowledge sharing, code reviews, and coaching, including upskilling the team on AI-assisted and agentic operations.
Serve as the escalation point for complex endpoint and macOS issues across global teams.
Partner with Security, Networking, and Identity teams to integrate MDM platforms with tools such as Okta and AWS VDI.
Produce and maintain technical documentation, architecture decision records, and end-user guides.
Strong communication skills for both technical and non-technical audiences; able to clearly convey complex concepts to stakeholders at all levels.
Requirements
Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience
5+ years of IT experience with at least 3 years in endpoint engineering or EUC roles