Senior Information Technology Engineer

Key responsibilities

• Own macOS management in Jamf Pro: enrollment, configuration profiles, Smart Groups, policies, software deployment, and compliance reporting
• Own Windows management in Microsoft Intune: device enrollment, configuration profiles, Update Rings, Win32 app packaging, and compliance policies.
• Maintain security baselines (FileVault/BitLocker, firewall, disk encryption, USB controls, patching cadence) across macOS and Windows.
• Administer Azure AD (Entra ID) and Google Workspace (users, groups, SSO, basic CA, app integrations) for day-to-day operations.
• Create clear technical documentationrunbooks, SOPs, change records, and user guides.
• Experienced in Jira or ServiceNow: ticket triage, SLAs, change management.
• Monitor fleet health and compliance; drive continuous improvement and root-cause analysis for incidents.
• Partner with Compliance on audits and evidence (asset visibility, encryption, patch posture, access controls).

Minimum qualifications

• 5+ years managing endpoints at scale:
• macOS with Jamf MDM (policies, profiles, packaging, reporting)
• Windows with Intune (configuration, application deployment, compliance, updates)
• 23 years admin experience across Azure AD (Entra ID) and Google Workspace.
• Ability to read, modify, and write Bash and PowerShell scripts when needed.
• Proven technical writing skills (SOPs, runbooks, architecture notes).
• Experience using Jira or ServiceNow, including Change Management processes.

Nice to have (preferred)

• Jamf 200/300/370 or similar certifications; Microsoft MD-102/SC-300 a plus.
• Packaging tools (Composer, Munki/Autopkg, IntuneWin, Winget).
• Identity & SSO familiarity (SAML/OIDC), Conditional Access basics, device compliance signals.
• Mac/Win update strategies at scale and rollout rings.
• Reporting/automation via APIs (Jamf Pro API, MS Graph, Google Admin SDK).
• Exposure to SentinelOne, Zscaler agents and their MDM deployment