Jamf Engineer

Role & responsibilities

Jamf Platform Administration (Jamf Pro & Jamf Connect)

Monitor and maintain overall platform health, performance, and availability.

Design, implement, and manage policies, configuration profiles, and scripts, including full lifecycle management (design, testing, deployment, and retirement).

Develop and maintain Smart Groups and scoping logic to enable automation and targeted deployments.

Manage device lifecycle workflows, including PreStage Enrollment, Automated Device Enrollment (ADE), and Zero Touch Deployment (ZTD).

Administer Apple Business Manager integration, including device assignment, token management, and enrollment workflows.

Configure and maintain Jamf Connect (Login and Menu Bar), including support for identity provider integrations (e.g., Entra ID, Okta).

Enforce identity workflows such as account provisioning, password synchronization, and optimized login experiences.

Maintain accurate device inventory through Extension Attributes, proper categorization, and structured site management.

Oversee application lifecycle management, including packaging, deployment, patching, and version control using Jamf-native capabilities.

Perform log analysis and troubleshooting across Jamf Pro and Jamf Connect components.

User Support & Operational Management

Provide first- and second-line support for Jamf-related issues impacting macOS devices.

Troubleshoot enrollment issues across ADE, PreStage, and user-initiated enrollment workflows.

Support end users with Self Service, including application installation, policy execution, and remediation actions.

Diagnose and resolve conflicts between configurations, applications, and user activity.

Document, track, and escalate issues beyond Jamf scope to relevant internal teams or third-party vendors.

Security, Compliance & Configuration Management

Implement and maintain security baselines aligned to CIS benchmarks or client-defined standards.

Manage macOS updates and patch compliance through automated Jamf workflows.

Enforce FileVault encryption and ensure proper key escrow compliance.

Configure and maintain macOS security controls such as Gatekeeper, System Integrity Protection (SIP), and device restrictions.

Implement application control policies, including whitelisting and blocklisting where applicable.

Develop, test, and deploy custom scripts to support automation and remediation.

Monitor, measure, and report on compliance posture against defined security policies.

Documentation, Reporting & Change Control

Maintain a comprehensive and up-to-date runbook for the Jamf environment.

Record all administrative changes in a structured change log.

Produce regular reports covering platform health, compliance, and operational metrics.

Adhere to client change management processes, including testing, stakeholder communication, and rollback planning.

Provide structured handover documentation at the conclusion of the engagement.

Preferred candidate profile