Systems Engineer

Pansophic Learning · Parma, OH · 4 days ago

Hybrid$90k–$110k/yrFull-time

About the role

The Systems Engineer is responsible for designing, administering, securing, and continuously improving Apple device management solutions across the organization within the Microsoft Intune and Entra ID ecosystems. This role is the primary engineering owner for Apple platforms, including iPads, iPhones, NEO devices, and MacBooks, with a focus on secure, scalable, and as close to zero-touch provisioning as possible.

Responsibilities

Design, implement, administer, and continuously improve Apple device management solutions within Microsoft Intune, Entra ID, and Apple Business Manager
Own engineering standards for iPads, iPhones, NEO devices, and MacBooks, including enrollment, configuration, security, compliance, application deployment, and lifecycle management
Implement and support zero-touch or near-zero-touch provisioning workflows for Apple endpoints, including Automated Device Enrollment, enrollment profiles, device configuration profiles, and user-driven provisioning
Engineer and maintain secure Microsoft 365 integrated login experiences across Apple platforms, including Entra ID authentication, conditional access, MFA, SSO extensions, and app protection policies
Deploy, manage, and support applications across Apple devices using Intune, including Microsoft 365 apps, business applications, required applications, available applications, and update policies
Implement and maintain security baselines, compliance policies, device restrictions, encryption requirements, network configurations, certificates, Wi-Fi profiles, VPN profiles, and endpoint protection policies
Support Microsoft Defender for Endpoint on Apple platforms, including deployment, configuration, monitoring, alerting, reporting, and remediation workflows
Partner with security and infrastructure teams to ensure Apple endpoint solutions align with organizational security, compliance, logging, monitoring, and operational requirements
Support identity and access management practices across Microsoft Entra ID, Google, and other enterprise systems as needed, including account lifecycle workflows, permissions, MFA, and access reviews
Evaluate, implement, and support Microsoft, Apple, Google, and third-party solutions, including but not limited to Intune, Entra ID, Apple Business Manager, Defender for Endpoint, MFA, DLP, Chromebook console, and related endpoint management platforms
Support large, distributed environments with a focus on automation, standardization, software patching, endpoint compliance, and platform stability
Automate manual tasks and improve operational workflows using scripting and modern endpoint management practices
Work closely with business partners, technical teams, and leadership to identify technology solutions that meet business, security, and operational requirements
Create, maintain, and improve technical documentation, operational procedures, deployment standards, support runbooks, and engineering diagrams
Build strategic relationships with internal counterparts, external vendors, and service providers, holding them accountable for delivery and support expectations
Establish and measure SLAs, ensuring endpoint management services meet business needs
Evaluate, implement, and support required logging, alerting, reporting, and monitoring tools to provide visibility into endpoint health, compliance, security posture, uptime, and performance
Establish standardized tools, configurations, and operational procedures for Apple endpoint management
Work across third-party solution providers, understand business needs, define success metrics, and measure outcomes

Requirements

Strong experience engineering and supporting Apple device management in enterprise environments, including iOS, iPadOS, and macOS

Hands-on experience with Microsoft Intune for Apple device enrollment, configuration profiles, compliance policies, application deployment, app protection policies, and endpoint lifecycle management

Experience with Apple Business Manager, Automated Device Enrollment, volume app assignment, managed Apple IDs, and Apple platform management best practices

Experience integrating Apple endpoints with Microsoft Entra ID, Microsoft 365, MFA, conditional access, SSO, and identity-based security controls

Experience with Microsoft Defender for Endpoint, endpoint compliance, security baselines, and device posture reporting

Extensive experience with Identity Access Management best practices, implementation, reporting, and auditing

Highly organized, able to multitask, with high attention to detail and the ability to prioritize

Patient and active listener

Ability to pass federal and state criminal background checks, including FBI/BCI

Confident, self-motivated, and a true team player

Successful individuals will be innovative, persuasive, creative, and have a genuine curiosity in their business partner’s business; goal and results oriented; optimistic; smart; value-added in mindset; proactive; and able to adapt easily to change

Exceptional ability to communicate and foster positive business relationships

Accountability and personal organization are essential

Demonstrate leadership qualities and abilities

Ability to establish milestones and ensure execution is on track

Ability to analyze and optimize existing processes

Strong scripting abilities within Microsoft cloud environments, Apple endpoint management workflows, and account management automation is preferred

Experience with Google cloud environments, Chromebook console, and Google account management is preferred

SharePoint permissions and administration experience preferred

Qualifications

Bachelor's degree or equivalent experience

Skills