Infra. Technology Specialist

Job Summary

Endpoint Mac and Mobility

Engineering

Perform engineering services to support existing Authorized User solutions and develop new solutions within the Cargill infrastructure including macOS devices operating systems application packages support processes selfservice Mac solutions and BYOD solutions.

Responsibilities

Endpoint Mac and Mobility

Engineering

Perform engineering services to support existing Authorized User solutions and develop new solutions within the Cargill infrastructure including macOS devices operating systems application packages support processes selfservice Mac solutions and BYOD solutions.

Design build and maintain all Authorized User solution software images and configuration profiles in compliance with Cargill standards and requirements.

Ensure all engineering services adhere to Cargill security compliance and governance policies including patching vulnerability management and lifecycle standards.

Deliver technical execution of macOS endpoint services including imaging patching software deployment and device compliance across all supported hardware platforms.

Own and maintain the macOS enrollment and provisioning process using Jamf and Apple Business Manager ensuring consistent deployment and compatibility across approved device models.

Administer and optimize Jamf Pro Intune MDM connectors and Apple Business Manager for provisioning compliance and lifecycle management.

Provide Tier 4 support for advanced troubleshooting and resolution of complex macOS endpoint issues including OSlevel failures and deployment errors.

Design implement and execute patching and vulnerability remediation strategies to maintain endpoint security and compliance with Cargill standards.

Support hardware evaluation and selection by testing compatibility performance and integration of new Mac device models with Cargills endpoint standards.

Develop automation scripts and workflows (e.g. Bash Python) to improve endpoint deployment compliance and user experience and contribute to the engineering backlog for ongoing enhancements.

Partner with product and client experience teams to resolve issues improve service quality and ensure alignment with Cargills technology roadmap and strategic priorities.

Maintain engineering expertise and oversight in Jamf Pro administration Apple Business Manager Intune integration configuration profiles scripting (Bash/Python) and reporting (SQL/PowerBI).

Manage secure enrollment and lifecycle of iOS and Android devices through Jamf and Intune MDM.

Create and maintain configuration profiles scripts and automations for macOS iOS and Android platforms.

Asset Management

Maintain accurate inventory of all Mac and mobile devices and associated software licenses using ServiceNow HAM/SAM or other approved tools.

Track and manage the full lifecycle of assets including procurement installation recovery redeployment and disposal coordination.

Validate user entitlement for requested platforms or software and report any noncompliance.

Manage IMACD (Install Move Add Change Dispose) requests for hardware and software ensuring proper authorization and documentation.

Optimize software spending through license reclamation and redistribution.

Provide reporting on asset status lifecycle stage and compliance with Cargill standards.

Coordinate secure data wiping and environmentally compliant disposal of retired devices.

Maintain and update lists of authorized approvers for assetrelated requests.

Ensure compliance with SarbanesOxley and other regulatory requirements for asset and account management.

Support recovery activities for lost or stolen assets including data protection and remediation in accordance with Cargill security policies.

Vulnerability Management

Manage global patching and software update distribution for all macOS iOS and Android devices and supporting infrastructure.

Monitor Apple and vendor advisories for critical updates.

Test and validate patches prior to deployment to minimize risk.

Provide reporting on patch compliance success rates and remediation plans for exceptions.

Implement antivirus updates and enforce policy compliance across all endpoints.

Perform patch and software distribution operations including reporting status and progress against planned schedules and providing risk mitigation plans for exceptions.

Implement processes for testing patch and software releases prior to general deployment.

Monitor Apple and other software provider sites and publications for software and patch security updates.

Operations & Support

Assist with asset build processes and field services onsite support resources with troubleshooting escalations.

Provide software support for Provider and thirdparty contractordeveloped or customized applications thirdparty software commercial offtheshelf software and operating systems.

Maintain operational documentation knowledge base articles and training materials for endpoint services.

Support users by phone or with training manuals to enable correct use of equipment and software.

Develop and maintain operational support processes and technical knowledge base articles to enable effective Level 1 2 and 3 support.

Provide expedited VIP support for executives.

Lifecycle Management

Execute IMACD requests for hardware and software.

Maintain accurate asset records in ServiceNow HAM/SAM and ensure license compliance.

Plan and execute refresh cycles for Mac and mobile devices based on Cargill policy.

Coordinate secure data wiping and environmentally compliant disposal of retired devices.

Validate user entitlement for requested platforms or software and report noncompliance.

Optimize software spending and reclaim unused licenses.

Security & Compliance

Enforce endpoint security policies including encryption antivirus and password compliance.

Manage account provisioning access control and audit trails per Cargill security standards.

Support legal and compliance requirements for ediscovery retention and audit reporting.

Perform proactive security maintenance including periodic account audits and vulnerability assessments.

Ensure compliance with SarbanesOxley and other regulatory requirements for domain access and account management.

Enforce encryption MFA and secure access policies for macOS and mobile platforms.

Monitor compliance posture and audit trails for all scoped platforms.

Implement vulnerability remediation and patching strategies for macOS and mobile devices.

Software Packaging

Package and deploy applications for macOS and iOS using Jamf Pro and Apple Business Manager.

Maintain compatibility testing for apps across macOS and iOS environments.

Provide selfservice access to approved applications through Jamf Self Service.

Ensure processes and tools are in place to procure deploy recover and redeploy software licenses (e.g. reclaiming and redistributing licenses when employees discontinue employment).

Make available through a simple easytouse online interface all Cargillapproved software for download by any Authorized User including ensuring a license key is approved and deployed to each Authorized Users equipment prior to software download.

Mobile Device Service Plan Management

Manage endtoend lifecycle of mobile service plans for iOS and Android devices including activation suspension and decommissioning of lines.

Coordinate with mobile service providers to set up new lines modify existing plans and terminate services as required.

Oversee SIM and eSIM provisioning activation and management for all mobile devices.

Maintain accurate inventory of SIM/eSIM cards and ensure proper assignment to authorized users.

Track and manage mobile device stock including procurement warehousing and shipping to global locations.

Ensure timely delivery of devices to end users and maintain visibility into shipping status and logistics.

Validate user entitlement for mobile plans and devices enforce compliance with Cargill standards and cost optimization policies.

Optimize carrier agreements and plan utilization to reduce costs and improve service quality.

Provide reporting on mobile plan usage cost trends and compliance with contractual obligations.

Coordinate secure data wiping and environmentally compliant disposal of retired mobile devices.

Partner with finance and procurement teams to reconcile billing validate charges and manage cost allocation for mobile services.

Develop and maintain standard operating procedures (SOPs) for mobile plan management SIM/eSIM handling and device shipping processes.

Provide Tier 2/3 support for mobile connectivity issues including carrier provisioning errors and SIM/eSIM activation failures.

Liaise with carriers for escalations troubleshooting and resolution of servicerelated issues.

Ensure compliance with security and governance policies for mobile devices including encryption MFA and secure enrollment via Jamf and Intune.

Provide temporary mobile devices and service plans for VIPs traveling to embargoed or highrisk countries ensuring compliance with security and regulatory requirements.

Depot Services

Refer to Depot Services reference for requirements to service Mac/Mobility