Jamf Engineer (Contract)

KeyData Cyber

10h•Remote

About The Position

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America. With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence. We deliver comprehensive solutions across IAM domains, including: Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management) Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries. If you’re ready to grow your career alongside some of the industry’s best, come join us — you’re key to our success. As a Jamf Engineer, you will be part of our Delivery Services Team, responsible for designing, implementing, and supporting our clients’ Apple device management and endpoint solutions. This role requires strong hands-on experience with Jamf, along with the ability to configure, deploy, and integrate Jamf in enterprise environments. You will work directly with clients to deliver secure, scalable, and efficient device management solutions, including device enrollment, configuration management, application deployment, security controls, and integrations with enterprise identity and IT systems.

Requirements

Demonstrated experience implementing and administering Jamf Pro in an enterprise environment.
Strong knowledge of Apple operating systems and mobile device management concepts.
Practical experience with Apple Business Manager, device enrollment, configuration profiles, policies, and application deployment.
Experience integrating Jamf with enterprise systems and troubleshooting the associated device workflows.
Proficiency in Bash or Zsh scripting for macOS administration and automation.
Working knowledge of REST APIs, authentication methods, and integration troubleshooting.
Understanding of device security, certificate management, encryption, and access controls.
Strong troubleshooting, documentation, and communication skills.
Ability to independently own technical tasks and collaborate across multiple teams.

Nice To Haves

Jamf certification.
Experience with Jamf Connect or Jamf Protect.
Experience supporting integrations with Microsoft Entra ID, Okta, or other enterprise identity providers.
Familiarity with PKI, SCEP, single sign on, and device compliance requirements.
Experience with large device deployments, Jamf migrations, or endpoint management

Responsibilities

Configure, administer, and maintain Jamf Pro to manage macOS, iOS, and iPadOS devices.
Implement device enrollment and provisioning workflows using Apple Business Manager and Automated Device Enrollment.
Develop and maintain configuration profiles, policies, smart groups, and device restrictions.
Configure device settings for network connectivity, VPN, certificates, encryption, and access to corporate resources.
Package, deploy, update, and troubleshoot applications, including software available through Jamf Self Service.
Integrate Jamf with identity providers, certificate services, endpoint security tools, and IT service management platforms, as required.
Develop scripts and API integrations to automate device management and administrative tasks.
Troubleshoot device enrollment failures, configuration conflicts, application installation issues, and integration errors.
Monitor device inventory, configuration compliance, and operating system update status.
Test configuration changes and software updates before production deployment.
Collaborate with identity, security, infrastructure, and service desk teams to support a secure and reliable user experience.
Maintain technical documentation, configuration standards, deployment procedures, and operational runbooks.