Serve as the primary owner of macOS management through JAMF Pro, including enrollment, configuration profiles, policies, and patching.
Manage iOS/iPadOS fleets using Apple Business Manager and JAMF/Intune with automated deployment and supervision workflows.
Administer Windows endpoints through Intune, managing configuration profiles, compliance policies, updates, and provisioning.
Use Intune and JAMF to package, deploy, update, and monitor applications such as Slack, Microsoft 365, Zoom, SentinelOne, Chrome, Firefox, Edge, Safari, and other business software.
Maintain a structured application lifecycle and ensure timely patching aligned with security and compliance requirements.
Automate routine or repetitive tasks using platform-native tools and scripting.
Implement and maintain device compliance policies, encryption standards, threat protection settings, and endpoint security baselines.
Work closely with Information Security to ensure alignment with corporate standards and respond to endpoint-related risks.
Act as the senior escalation point for complex endpoint issues across macOS, Windows, and mobile platforms.
Collaborate with Helpdesk, IT, and InfoSec teams to solve configuration challenges and improve fleet reliability and security.
Maintain accurate device inventory, automated provisioning workflows, and documentation for configurations and procedures.
Identify and implement improvements to endpoint reliability, automation, and user experience.

Extensive hands-on experience (3 – 6 years) with JAMF Pro, Apple Business Manager, and Microsoft Intune in production environments.
Advanced proficiency managing macOS, Windows, iOS, and iPadOS at scale.
Strong background in software deployment, application lifecycle management, and patching workflows across Apple and Windows systems.
Familiarity with enterprise applications including Slack, Microsoft 365, Zoom, Chrome, Firefox, Edge, Safari, and endpoint security tools.
Strong troubleshooting skills and ability to operate as the primary subject matter expert.
Preferred: Scripting capability with Bash, Zsh, and PowerShell.
Experience with identity-centric management (Okta, Azure AD/Entra ID).
Knowledge of security configuration, conditional access, or endpoint hardening.

Competitive compensation package
Employee Equity Appreciation Program
Health and wellness insurance benefits
401k with employer match
Flexible work environment
Unlimited paid time off (which includes paid holidays and Winter Break)
Paid parental leave
Tuition assistance, professional development, and opportunities for career growth
Best in class technology equipment for every employee
Penthouse suite in downtown DC seconds away from Washington Nationals Stadium and Audi Field

Senior Endpoint Management Administrator

Key skills