Apple Client Platform Engineer (Remote, US)

Alectrona•Austin, TX

5d•Remote

About The Position

Alectrona is seeking a Client Platform Engineer to lead professional services engagements for organizations running Apple at scale. This role involves designing management platforms, building new components, and providing honest assessments of feasibility. The team operates remotely across multiple time zones, with expectations for occasional in-person meetings, conference presentations, and active team participation. The engineer will be responsible for designing, deploying, and handing over Apple management platforms including MDM, identity, patching, security tooling, and their integrations. They will own services engagements end-to-end, managing their own time and projects autonomously. The role requires solving complex technical problems, understanding software development concepts for automation and integrations, and challenging customer assumptions when necessary. The engineer will also support managed services customers, mentor colleagues, and contribute to the development of new products and services. All responsibilities must be performed in alignment with the company's core values, mission, and ethical standards, promoting a respectful, innovative, and inclusive workplace.

Requirements

Expert in Apple management and knowledge of the rest of IT to work across the whole stack a customer runs.
Deep experience managing Apple devices in a variety of types of environments.
Solid hands-on expertise in at least two enterprise Apple device management platforms, and the ability to pick up the others fast.
Command of the Apple management stack itself, not just one vendor’s console: this includes an understanding of the MDM protocol, Declarative Device Management, Automated Device Enrollment and Apple Business, APNs, configuration profiles, TCC and PPPC, FileVault, code signing and notarization, Platform SSO, etc.
Experience migrating fleets between platforms, and a solid understanding of what each vendor does well and where another solution might be stronger.
Familiarity with more than just using basic shell scripts.
Confidence in writing your own Shell scripts and troubleshooting code at a minimum.
Using git, participating in code review, leveraging CI, and testing and packaging are part of how you work.
Leverage APIs, webhooks, and automation workflows to complete tasks and build processes that scale.
IP networking: familiar with TCP/IP, DNS, DHCP, routing, 802.1X, VPN, proxies and TLS inspection.
Server and identity administration: supporting Platform SSO, WebAuthn, Entra ID, Okta, Google Workspace, Active Directory, SAML, OIDC, SCIM, Kerberos, and certificate authorities.
Security and compliance: CIS Benchmarks, NIST 800-53, SOC 2, ISO 27001, endpoint detection tooling, vulnerability management, and how each of these applies to securing Macs in production.
Experience and confidence delivering paid professional services or consulting to external customers.
Comfortable actively leading and training customers on implementing configuration changes when we aren't provided direct access to systems.
Experience and confidence in supporting end users and small businesses in our managed services operation.
Explain complex technical work to people who do not share your background, in writing and out loud.
Participate in discovery, kickoff, and project scoping calls as the engineering voice; ask good questions and translate client context into technical decisions.
Confidence to stand up for what's right, whether it's about a technical best practice or just common sense.
Challenge your customer to think differently and maintain trust in our recommendations.
Stay steady when a project goes sideways, the workload swings, or a customer is unhappy.
Fluent English language proficiency (required).
Four-year degree, or the equivalent in experience and knowledge.

Nice To Haves

Swift, Python, Go or other experience is a plus.
Use AI to accelerate and complement your code, not as a wholesale replacement.
Apple Certified IT Professional
Jamf Certified Expert (400)
Microsoft MD-102
CompTIA Network+ and Security+
CISSP

Responsibilities

Design, deploy, and hand over Apple management platforms: MDM, identity, patching, security tooling, and the integrations that tie them together.
Own services engagements end to end in accordance with our company values.
Scope the work, plan it, run it, document it, and close it out.
Effectively manage your own time and projects.
Solve the problems that get escalated after everyone else has tried.
Understand software development concepts: automations, integrations against vendor APIs, custom agents, deployment tooling.
Challenge customers when their plan will not survive production.
Run scoping calls.
Uncover the business driver behind the request, and then explain what the work will take in plain language.
Support our small and medium business managed services customers alongside the rest of the Alectrona team.
Provide technical support and guidance to our managed services customers, including properly recording notes, updating documentation, and resolving tickets within SLA targets.
Mentor other engineers and colleagues to raise the standards and help everyone learn.
Shape new products and services.
Perform all job responsibilities in alignment with the core values, mission and purpose of the organization.
Adhere to the highest moral, ethical and legal standards to deliver an environment that promotes respect, innovation and creativity.
Support and promote a positive, inclusive workplace where the talents and strengths of our increasingly diverse workforce are welcomed, further developed, and expressed in our work.