macOS Subject Matter Expert

Job Summary

Accountable for leading the delivery, engineering, and support of the macOS estate within the EUC Systems Management portfolio, operating in a diverse Agile Scrum team. Serves as the organisation's deepest technical authority on Apple platform management - Jamf Pro, Apple Business Manager, Apple Push Notification Service, and macOS - with responsibility for endpoint security and compliance, macOS and third-party patching, application packaging and lifecycle management, zero-touch device provisioning, vulnerability management, automation and scripting, reporting, and end-user experience optimisation across the managed Mac fleet.

While macOS is the primary focus of this role, the position also requires solid working knowledge of Windows workstations OS, contributing to Windows delivery and support alongside the wider team, ensuring endpoint standards, security policies, and user experience.

Responsibilities

Managed Service Partner Governance

• Lead engagement with Managed Service Partners (MSPs) to drive seamless operations, service excellence, and the successful delivery of technical initiatives, ensuring commitments, priorities, and business objectives are achieved.

macOS Engineering Delivery Management

• Own configuration, management and continuous improvement of the Jamf Pro environment, including Prestage enrolments, Smart and Static Groups, Extension Attributes, policies, configuration profiles and Blueprints.
• Own zero-touch provisioning end to end through Apple Business Manager and Automated Device Enrolment, and administer platform dependencies including the APNS certificate, ABM tokens, Volume Purchase Program content, and Jamf Pro integrations with Okta / Entra ID for authentication, group targeting, and role-based access.
• Collaborate with the Global Hardware Procurement team to define, maintain, and govern Apple hardware standards, approved device models, and Apple warranty programs across the enterprise
• Configure and enforce macOS system settings and security baselines through Blueprints, covering SCEP certificates, Wi-Fi, File Vault, restrictions, Gatekeeper, and system extensions.
• Own macOS application packaging and delivery, building, signing, and deploying .pkg and .dmg packages through Jamf policies and Self Service in line with approved naming, bundle identifier, codesigning, and checksum standards, and curate the Self-Service catalogue.
• Lead the validation, testing, deployment, and operational readiness of new macOS software deployments and configuration changes, including pilot rings and rollback plans.
• Lead macOS and third-party application patching, ensuring remediation activities are completed within defined SLAs while maintaining high compliance and operational stability, and operate the macOS Update and update exception workflow to balance business continuity against security posture.
• Own Endpoint Vulnerability Management for the Mac estate, driving identification, prioritization, tracking, remediation, and reporting of endpoint security vulnerabilities in collaboration with Security Operations, Engineering, and Infrastructure teams.

End User Experience Automation

• Lead initiatives to identify and eliminate recurring macOS operational issues, reducing manual overhead through shell/Bash, Python, and JamF Automation and improving service quality, IT process friction, and client satisfaction.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.