Lead Mac Platform Engineer

Capital One • McLean, VA

5d • $149,800 - $188,100

About The Position

Capital One is looking for a Mac Platform Engineer to join our growing Mac Engineering team. The platform has grown to support over 40,000 endpoints in recent years, as one of the quickest growing platforms at Capital One. The engineering role will be focused on macOS vulnerability management, ensuring our fleet remains secure and “vuln-free”. The engineer will have opportunities to identify and implement solutions for improving our vulnerability management processes and observability, maintaining existing processes and assisting other members of our engineering team with software testing/validation.

Requirements

• High School Diploma, GED, or equivalent certification
• At least 2 years of experience of managing macOS devices leveraging JAMF Pro
• At least 2 years of experience with Vulnerability Management and patching
• At least 2 years of experience using packaging tools (JAMF's Composer, Apple's package utility, or Suspicious Package)
• At least 2 years of experience developing Shell scripts, AppleScript, or Python scripts

Nice To Haves

• Bachelor’s Degree
• One or more of the following JAMF Pro Certifications: JAMF Pro 200, 300, or 400.
• 2+ years of experience in Change Management process
• 2+ years of experience working within an Agile environment
• 2+ years of experience with vulnerability management reporting tools: Qualys, Crowdstrike, Symantec, Trellix, or Nessus.
• Experience with Mac Admins community and available open source solutions

Responsibilities

• Package, test, and schedule out routine patches for business software when vulnerability patch fixes are released
• Review vulnerability management reports and investigate devices with active vulnerabilities to drive down vulnerable endpoints
• Engage with our vulnerability management partners for assistance with debugging false-positives, or getting more information related to vulnerabilities
• Escalate vulnerabilities/patching operations that need an exception due to potential user impact
• Assist with business-as-usual packaging requests for new software and software updates
• Research and suggest improvements to our vulnerability management posture on endpoints to improve our overall compliance metrics
• Periodically review existing automation processes to ensure they are working as expected and automatically updating client software
• Assist with testing and validation of new software and agents the engineering team is planning to deploy
• Improve vulnerability observability with telemetry from Mac endpoints to better inform decisions with data and alert on problems as they arise

Benefits

• performance based incentive compensation
• cash bonus(es)
• long term incentives (LTI)
• comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED