Senior macOS Endpoint Engineer

Employment: Full-time Experience level: Mid-Senior Level Job Description macOS Device Management Manage enterprise Mac fleets using MDM solutions such as: Kandji, Jamf Pro, Microsoft Intune, and Workspace ONE Configure and maintain enrollment programs :  Apple Business Manager (ABM) and Automated Device Enrollment (ADE) Create and manage configuration profiles, restrictions, compliance policies, and security baselines. Application Deployment & Packaging Package and Deploy PKG, DMG, and ZIP-based applications on macOS. Manage application updates and version control. Troubleshoot application installation and compatibility issues. Security & Compliance Implement security policies and compliance standards. Manage: FileVault encryption Privacy Preferences Policy Control (PPPC) System and Kernel Extensions Certificates and keys Identity & Access Management Integrate and support: Microsoft Entra ID (Azure AD), AD, Kerberos SSO and Platform SSO Manage user authentication and device trust policies. Automation & Scripting Develop and maintain automation scripts using: Bash, Shell Scripting, Python and PowerShell (nice to have) Automate software deployment, compliance checks, reporting, and remediation tasks. OS Upgrades & Patch Management Plan and execute macOS upgrades. Manage operating system patching and application updates. Monitor update compliance and remediation activities. Troubleshooting & Support Serve as Level 3 escalation point for macOS-related issues. Troubleshoot: Login and authentication issues MDM enrollment failures Application deployment problems Network connectivity issues Compliance and certificate-related incidents Analyze logs and perform root cause analysis. Qualifications Technical Skills Expert-level knowledge of macOS administration. Strong understanding of: Apple Business Manager, Device Enrollment, Configuration Profiles, FileVault, Certificates and Keychain Management Strong scripting experience using Bash and Shell scripting. Experience managing software packaging and deployment. Familiarity with enterprise networking concepts: DNS, VPN, Wi-Fi Profiles and Proxy Configuration Troubleshooting Expertise System Logs, Unified Logs, Console Logs, Endpoint Security Logs and Application Crash Analysis  Preferred Qualifications Experience with Kandji MDM or Equal Mac MDM administration. Experience supporting large-scale macOS environments (500+ devices). Exposure to ServiceNow, Jira, or similar ITSM tools. Soft Skills Excellent communication and Strong analytical and troubleshooting abilities. Strong documentation and process improvement mindset. Ideal Candidate Profile The ideal candidate will have 5–6 years of enterprise macOS administration experience , strong expertise in Kandji/Jamf/Intune , solid Bash scripting and automation skills , deep understanding of Apple security and device management , and the ability to independently manage and troubleshoot large-scale Mac environments. Company Description At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.   Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.   This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.   We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.   What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.   If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.