Lead Mac Platform Engineer

Capital One•Richmond, VA

About The Position

Capital One is looking for a Mac Platform Engineer to join our growing Mac Engineering team. The platform has grown to support over 40,000 endpoints in recent years, as one of the quickest growing platforms at Capital One. The engineering role will be focused on macOS vulnerability management, ensuring our fleet remains secure and “vuln-free”. The engineer will have opportunities to identify and implement solutions for improving our vulnerability management processes and observability, maintaining existing processes and assisting other members of our engineering team with software testing/validation.

Requirements

High School Diploma, GED, or equivalent certification
At least 2 years of experience of managing macOS devices leveraging JAMF Pro
At least 2 years of experience with Vulnerability Management and patching
At least 2 years of experience using packaging tools (JAMF's Composer, Apple's package utility, or Suspicious Package)
At least 2 years of experience developing Shell scripts, AppleScript, or Python scripts

Nice To Haves

Bachelor’s Degree
One or more of the following JAMF Pro Certifications: JAMF Pro 200, 300, or 400.
2+ years of experience in Change Management process
2+ years of experience working within an Agile environment
2+ years of experience with vulnerability management reporting tools: Qualys, Crowdstrike, Symantec, Trellix, or Nessus.
Experience with Mac Admins community and available open source solutions

Responsibilities

Package, test, and schedule out routine patches for business software when vulnerability patch fixes are released
Review vulnerability management reports and investigate devices with active vulnerabilities to drive down vulnerable endpoints
Engage with our vulnerability management partners for assistance with debugging false-positives, or getting more information related to vulnerabilities
Escalate vulnerabilities/patching operations that need an exception due to potential user impact
Assist with business-as-usual packaging requests for new software and software updates
Research and suggest improvements to our vulnerability management posture on endpoints to improve our overall compliance metrics
Periodically review existing automation processes to ensure they are working as expected and automatically updating client software
Assist with testing and validation of new software and agents the engineering team is planning to deploy
Improve vulnerability observability with telemetry from Mac endpoints to better inform decisions with data and alert on problems as they arise