MAC Engineer II

Akima, LLC•Ashburn, VA

6d•Hybrid

About The Position

Cloud Lake is seeking a Mac Engineer II to support and help engineer a distributed, enterprise macOS environment as part of the CBP End User Device IT Management Services team. This hands-on role combines Tier II–IV end-user support with platform engineering execution. The position supports onsite macOS users through walk-up and appointment-based requests and carries out engineering work under the direction of the Senior Mac Systems Engineer and Mac Systems Architect. The engineer independently troubleshoots macOS and endpoint-management issues while continuing to handle support tickets and taking on an increasing share of engineering and project work. Engineering activities include application packaging, configuration profile development, security compliance, vulnerability remediation, and controlled change deployment. The role is primarily onsite in a hybrid arrangement, with some remote work as approved; occasional travel may be required.

Requirements

U.S. citizenship and ability to obtain a Federal Public Trust clearance.
Bachelor’s degree in information systems or a related field, or 4–6+ years of IT administration and/or engineering experience with direct macOS and enterprise device-management experience in lieu of a degree.
Demonstrated independent administration of an enterprise MDM platform, including policies, configuration profiles, patching, and Self Service, in an environment of 1,000+ devices.
Proficiency with macOS application packaging and deployment for Apple silicon (ARM) and Intel hardware.
Working knowledge of macOS security settings, system hardening, and applying and validating compliance baselines such as mSCP.
Comfort with the macOS command line (Terminal) and zsh/bash scripting for automation and troubleshooting.
Ability to independently research, test, and resolve unfamiliar macOS and device-management issues before escalating.
Ability to gather requirements, build test cases, and validate changes on test devices before fleet deployment.
Strong documentation skills and ability to collaborate across cross-functional teams.
Strong problem solving, troubleshooting, critical thinking, self-direction, attention to detail, collaboration, communication, documentation, and cybersecurity awareness.

Nice To Haves

Current CBP Background Investigation or a Top-Secret clearance adjudicated within the last five years.
Jamf Certified Tech (200) or equivalent enterprise device-management certification; Jamf Certified Admin (300) is a plus.
Hands-on experience with endpoint security and identity tooling beyond basic device management.
Experience supporting users in a distributed, regulated environment, such as a DHS component.
Apple Certified Support Professional (ACSP), ServiceNow, Microsoft 365/Active Directory, networking fundamentals (DNS, VPN, VLANs, certificates), and mSCP/DISA STIG/NIST 800-53 experience.
Smart card/PIV experience.
Knowledge of modern macOS identity and authentication, including Platform Single Sign-On (PSSO) and federated authentication.

Responsibilities

Provide onsite desk-side, walk-up, and appointment-based support for macOS users, including VIPs and senior executive leadership.
Perform Tier II–IV troubleshooting of macOS, device-management, and application issues, driving issues to resolution before escalating.
Resolve assigned tickets and document troubleshooting steps, root cause, and resolution.
Support enterprise and third-party macOS applications, including Microsoft 365, Adobe Creative Cloud, browsers, and VPN or remote-access tools.
Execute patching events through the management platform to maintain standard OS and application versions across the fleet.
Package, test, and deploy macOS applications for Apple silicon (ARM) and Intel devices.
Build and test configuration profiles for new platform capabilities and security requirements.
Review and remediate vulnerability findings in partnership with cybersecurity, including analysis of affected software.
Apply the macOS Security Compliance Project (mSCP) to new macOS releases by tailoring, testing, and validating baselines and compliance reporting.
Deploy approved changes through the established Change Request (CR) process, testing and validating before release.
Configure and maintain supporting automation and end-user-experience tools for automated packaging, patch automation, provisioning, and custom user messaging.
Support modern identity workflows such as Platform Single Sign-On (PSSO) and smart card/PIV authentication.
Produce technical documentation, SOPs, and runbooks for repeatable operations and knowledge transfer.
Collaborate across cybersecurity, Windows desktop management, field support, and government and contractor leadership.
Support a scheduled onsite walk-up/desk-side rotation; occasional travel may be required.