Senior Macintosh Systems Engineer

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have. The result is a government workforce that is exponentially more creative and productive. For more information, visit www.Empower.ai.

Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company's commitment to hiring and supporting active-duty and veteran employees.

Empower AI: As the Senior Macintosh Systems Engineer, you'll serve as a technical lead within the DISA J6 Macintosh Center of Excellence, supporting the design, implementation, security, and operation of an enterprise macOS environment. This role involves developing automated system administration solutions, applying DISA STIGs for security hardening, and serving as the highest escalation point for complex Mac-related issues. You'll also be responsible for integrating third-party applications and ensuring secure interoperability within an Active Directory-based infrastructure.

In assuming this position, you will be a critical contributor to meeting Empower AI's mission: To deliver innovative, cost-effective solutions and services that enable our customers to rapidly adapt to dynamic environments.

Responsibilities

Lead the development of scalable Mac provisioning workflows and device configurations to support new macOS releases and evolving organizational needs
• Oversee maintenance, upgrades, and complex troubleshooting for the Jamf Pro server
• Develop, maintain, and optimize advanced scripts using Bash, AppleScript, and the Jamf Pro API to automate workflows and enhance operational efficiency
• Design and implement solutions that integrate the macOS environment with the broader enterprise Windows architecture, ensuring seamless compatibility and security compliance
• Develop automation methods for system administration, endpoint security, application deployment, and user support to streamline IT operations
• Continuously evaluate and implement emerging tools, practices, and technologies to enhance engineering and support capabilities
• Provide senior-level engineering support to diagnose and resolve complex issues with macOS and deployed software, collaborating closely with engineering and support personnel
• Work with third-party vendors and internal teams to address issues that require escalation, and provide testing and feedback when working towards successful resolution of escalated issues
• Administer macOS updates and upgrades using Jamf Pro, as well as open-source software update enforcement tools, ensuring minimal user disruption
• Configure, test, and implement DISA STIG requirements in accordance with DOD cybersecurity policies and standards
• Create, test, and deploy custom application packages using Jamf Pro to meet enterprise software deployment standards
• Create and maintain comprehensive documentation, including network diagrams and SOPs
• Provide configuration and support expertise for COTS Mac applications
• Support the growth of Junior Mac Engineers through knowledge sharing, hands-on mentoring, and collaborative project work

Qualifications

• Clearance Required: US Department of Defense (DOD) Secret clearance or ability to obtain
• Proven analytical and problem-solving abilities
• Ability to effectively prioritize and execute tasks
• Highly self-motivated and directed
• Excellent written, oral, and interpersonal communication skills
• Team-oriented and skilled in working within a collaborative environment
• Ability to document tasks and requirements

Required Education and Experience

• Bachelor's degree in IT or related field-or equivalent experience
• 10 years of professional IT experience with at least 4 years in Apple/macOS administration or engineering
• DOD 8570 IAT-II compliance (e.g. CompTIA Security+)
• Strong scripting experience using Bash and AppleScript
• Deep understanding of macOS and Apple ecosystem technologies, including Apple Configurator, Apple Business Manager, FileVault, Automated Device Enrollment, and zero-touch provisioning workflows
• Proficient with enterprise authentication and directory services such as Active Directory, LDAP, Kerberos, and Single Sign-On (SSO)
• Experience with smartcard authentication, pairing methods, and certificates
• Knowledge and understanding of PKI, certificate authorities, and Keychain management
• Experience installing, configuring, and supporting the following security and endpoint software: Microsoft Defender, Tenable Nessus Agent, Splunk, and Palo Alto GlobalProtect
• Jamf 100 - Jamf Certified Associate

Desired Bonus Experience

• Jamf 200 - Jamf Certified Tech
• Jamf 300 - Jamf Certified Admin
• Jamf 370 - Jamf Certified Admin - Jamf Protect
• Jamf 400 - Jamf Certified Expert
• Apple Mac/macOS certifications
• Experience supporting federal government IT environments and compliance requirements
• Proficiency with MySQL and PowerShell
• Experience integrating macOS devices into Windows-centric enterprise environments

Physical Requirements:

This position requires the ability to perform the below essential functions:

• Sitting for long periods
• Standing for long periods
• Stoop, kneel, crouch, or crawl as required
• Lift and carry weight up to 50 pounds

It is the policy of Empower AI to provide equal opportunity in recruiting, hiring, training, and promoting individuals in all job categories without regard to race, color, religion, national origin, gender, age, disability, genetic information, veteran status, sexual orientation, gender identity, or any other protected class or category as may be defined by federal, state, or local laws or regulations. In addition, we affirm that all compensation, benefits, company-sponsored training, educational assistance, social, and recreational programs are administered without regard to race, color, religion, national origin, gender, age, disability, genetic information, veteran status, sexual orientation, or gender identity. It is our firm intent to support equal employment opportunity and affirmative action in keeping with applicable federal, state, and local laws and regulations. Empower AI is a VEVRAA Federal Contractor.