Senior Mac Engineer

About the role

We are seeking a highly skilled Senior Mac Engineer to design, implement, and support enterprise Apple device management solutions. This role will be part of a team within a fast-paced, dynamic environment, focused on the architecture and lifecycle management of macOS, iOS, and iPadOS devices using modern MDM platforms, including Jamf and Microsoft Intune.

Responsibilities

• Design and implement scalable Apple device management solutions using Jamf Pro and Microsoft Intune
• Architect zero-touch deployment workflows leveraging Apple Business Manager (ABM) and Automated Device Enrollment (ADE)
• Manage the full lifecycle of macOS and iOS devices (provisioning, configuration, patching, compliance, and decommissioning)
• Develop and maintain configuration profiles, policies, and scripts (Bash, Zsh, or Python)
• Integrate Apple devices into enterprise identity platforms (Azure AD / Entra ID)
• Implement and enforce security baselines aligned with CIS benchmarks and organizational standards
• Manage OS upgrade strategies and application deployment (PKG, DMG, VPP apps)
• Troubleshoot complex endpoint, authentication, and MDM issues across macOS/iOS environments
• Collaborate with security, networking, and infrastructure teams to ensure compliance and performance
• Automate workflows and reporting using APIs and scripting
• Provide Tier 3 escalation support and mentor junior engineers
• Partner with Global Service Desk to operationalize Apple support at scale
• Create structured troubleshooting workflows for common macOS/iOS issues
• Create and maintain end-user documentation for Apple devices

Requirements

• 5–8+ years of experience managing Apple devices in an enterprise environment
• Jamf certifications (Jamf 300/400)
• Deep expertise with Jamf Pro for macOS/iOS/tvOS
• Strong experience with Microsoft Intune (Endpoint Manager) for macOS/iOS
• Hands-on experience with Apple Business Manager (ABM)
• Strong scripting skills (Bash, Zsh, or Python)
• Experience with macOS internals, security frameworks, and system architecture
• Knowledge of identity integration (Azure AD / Entra ID, SSO, Conditional Access)
• Experience with device compliance, encryption (FileVault), and security tooling
• Familiarity with networking fundamentals (VPN, Wi-Fi profiles, certificates)

Preferred Qualifications

• Experience with Microsoft Entra ID (formerly Azure AD) and Conditional Access policies
• Experience integrating with Entra or other IdPs
• Knowledge of compliance frameworks (SOC 2, ISO 27001, CIS benchmarks)
• Background in user enablement, training, or technical writing
• Familiarity with tools like Autopkg, Setup Manager, Installomator
• Understanding of Blueprints and Compliance delivery mechanisms
• Familiarity with Platform SSO configurations

Pay

The salary range for this role is applicable for jobs performed in California, Colorado, New York, or remote jobs that can be performed in these states. An employee’s pay position within the salary range may be based on several factors including relevant education, qualifications, certifications, experience, skills, ability, knowledge of the job, performance, contribution, results, geographic location, shift, internal and external equity, and business and organizational needs.

Benefits

• Paid vacation time and sick leave
• Medical, dental, and vision insurance
• Life, accident, and disability insurance
• Tax-advantaged flexible spending and health savings accounts
• Employee assistance program
• Voluntary benefit programs (supplemental life and AD&D, legal plan, pet insurance, critical illness, accident and hospital indemnity)
• Tuition reimbursement
• Transit benefits
• Applause Program
• Employee stock purchase plan
• WD Savings 401(k) Plan
• Eligibility for bonuses under WD’s Short Term Incentive Plan (STI Plan) or the Sales Incentive Plan (SIP), depending on role and performance
• Eligibility to participate in the annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents