Mac Systems Administrator

Carnegie Mellon University•Pittsburgh, PA

About The Position

The Mac Systems Administrator manages, secures, and improves the organization’s macOS and Apple environment, with a focus on Jamf, automation, and device lifecycle management. The role builds and maintains a reliable, secure platform integrated with broader IT infrastructure to support researchers, developers, and other technical users. The administrator works independently and collaboratively with IT teams and researchers to address technical challenges, improve systems management, and maintain a secure, smoothly operating macOS environment. The role includes administering and configuring macOS systems in an enterprise environment; supporting macOS within a heterogeneous infrastructure and developer-focused workflows; providing tier 3 support; leading service and deployment projects; resolving complex hardware and software issues; and training, documenting, and consulting on applications and services. It also involves automating administrative work, applying Infrastructure-as-Code, configuration management, CI/CD, and Git-based practices, and implementing macOS security controls and enterprise identity and access integrations. The position participates in a rotating on-call schedule and may occasionally require evening or weekend work for critical services and scheduled maintenance. The administrator must respond remotely to service outages within 30 minutes and, when necessary, report on-site to the local SEI facility within 60 minutes, barring extreme adverse conditions. Travel between SEI and CMU facilities is required, with occasional travel to other SEI locations, conferences, and off-site meetings. The position is full-time, regular staff, based in Pittsburgh, Pennsylvania.

Requirements

Experience administering, configuring, deploying, and supporting macOS systems in an enterprise environment.
Experience with Apple device management platforms such as Jamf Pro, Apple School Manager, or Microsoft Intune.
Working knowledge of macOS security practices, including endpoint protection, encryption, system hardening, patch management, and vulnerability remediation.
Experience integrating and supporting macOS systems in heterogeneous environments.
Experience using scripting languages such as Bash, Python, or zsh to automate administrative tasks and improve efficiency.
Strong troubleshooting and problem-solving skills, including diagnosing complex hardware, software, authentication, and connectivity issues.
Ability to work independently and collaboratively with IT teams, developers, researchers, and other technical users.
Strong communication and documentation skills, including the ability to explain technical issues to technical and non-technical audiences.
Participate in a rotating on-call schedule and occasionally work evenings or weekends to support critical services and scheduled maintenance.
Respond remotely to service outages within 30 minutes and, when necessary, report on-site to the local SEI facility within 60 minutes, barring extreme adverse conditions.
Travel between SEI and CMU facilities as required, with occasional travel to other SEI locations, conferences, and off-site meetings.

Nice To Haves

Experience supporting macOS systems in development, research, or other technically demanding environments.
Understanding of Infrastructure-as-Code (IaC), configuration management, and automation tools such as Ansible, Terraform, and APIs.
Familiarity with Microsoft Entra ID and other Microsoft 365 technologies.
Experience with cloud infrastructures such as Azure and AWS.
Familiarity with Git-based workflows, CI/CD concepts, and configuration files using YAML and JSON.
Understanding of security and compliance frameworks, including NIST SP 800-171 and CMMC.

Responsibilities

Install, maintain, and configure macOS systems to provide a reliable and secure platform.
Integrate and support macOS systems in a heterogeneous enterprise environment, including developer-focused technologies and workflows.
Provide tier 3 support for IT Services technologies and collaborate with systems administrators and engineers to resolve issues.
Lead projects involving new services and deployments.
Diagnose and resolve complex end-user hardware and software issues.
Train users, document services, and provide consulting for applications and services.
Use scripting and automation to streamline tasks and improve operational efficiency.
Leverage Infrastructure-as-Code, configuration management, and CI/CD practices.
Manage configuration and deployment changes through Git-based workflows.
Drive automation and solve complex problems using modern DevOps practices.
Implement and maintain macOS security controls, including system hardening, endpoint protection, encryption, vulnerability management, and configuration compliance.
Ensure macOS systems comply with organizational security policies and applicable regulatory frameworks.
Manage macOS identity and access controls, including integration with enterprise authentication.
Participate in a rotating on-call schedule and occasionally work evenings or weekends for critical services and scheduled maintenance.
Respond remotely to service outages within 30 minutes and, when necessary, report on-site to the local SEI facility within 60 minutes, barring extreme adverse conditions.
Travel between SEI and CMU facilities as required, with occasional travel to other SEI locations, conferences, and off-site meetings.

Benefits

Comprehensive health insurance, including medical, prescription, dental, and vision coverage.
Tuition benefits, including benefits for dependent children.
Generous paid time off and observed holidays.
Retirement savings program with employer contributions; the posting also cites an 8% monthly retirement contribution without requiring an employee contribution.
Life, accidental death, and disability insurance.
Flexible work arrangement.
Professional development opportunities for conferences, training, or certifications.
Free Pittsburgh Regional Transit bus pass and transportation on the Port Authority Transit System.
Access to campus fitness facilities and fitness center.
Mindfulness programs.
Child care resources and access to a Family Concierge Team.
Access to university resources.