Senior Mac Mobility Engineer

CACI•Arlington, VA

About The Position

CACI is seeking a Senior Mac Mobility Engineer to support a Department of Homeland Security (DHS) contract. The role is part of an endpoint engineering and security team responsible for managing, securing, automating, and supporting enterprise Apple environments, including macOS computers, iPhones, and iPads. The engineer will focus on Apple endpoint engineering, mobile device management, application deployment, patching, security compliance, automation, and troubleshooting. The position uses endpoint management technologies to improve security, operational efficiency, device reliability, and the end-user experience across the enterprise Apple environment. The engineer will collaborate with cybersecurity, infrastructure, service desk, and customer teams; provide technical guidance to engineers and support teams; maintain technical and operational documentation; and communicate technical findings and recommendations to customers and stakeholders. The role supports a DHS customer mission and requires the ability to attain DHS Entry on Duty (EOD) approval.

Requirements

Ability to attain DHS Entry on Duty (EOD) approval.
Bachelor's degree plus 10 years of applicable experience, associate degree plus 12 years of applicable experience, or 16 years of applicable experience in lieu of a degree.
Extensive hands-on experience administering and engineering enterprise Apple environments.
Strong experience with macOS administration, configuration, application deployment, patching, security, and troubleshooting.
Experience managing Apple devices using Jamf Pro, Microsoft Intune, and/or comparable endpoint management technologies.
Experience supporting enterprise iOS and iPadOS devices in a mobile device management environment.
Experience with Apple Business Manager and Automated Device Enrollment.
Experience developing and maintaining configuration profiles, management policies, compliance controls, and security baselines.
Experience with scripting and automation using Bash, Zsh, PowerShell, or similar technologies.
Experience with identity and access management technologies, including Microsoft Entra ID, Active Directory, SSO, certificates, and/or PKI.
Experience implementing and troubleshooting endpoint security controls and supporting vulnerability remediation.
Demonstrated ability to troubleshoot complex endpoint management issues and implement effective technical solutions.
Strong analytical, documentation, communication, and customer collaboration skills.

Nice To Haves

ITIL v3 or v4 certification.
Jamf Certified Administrator or Jamf Certified Engineer certification.
Apple professional certification or relevant Apple platform training.
Microsoft Intune or other endpoint management certifications.
Experience with NIST, CIS, STIG, or other federal security baselines.
Vulnerability management and endpoint hardening experience.
Experience with mobile application management and application protection policies.
Experience supporting large-scale federal or highly regulated enterprise environments.

Responsibilities

Engineer, administer, and maintain enterprise Apple environments, including macOS, iOS, and iPadOS devices.
Manage device enrollment, provisioning, configuration, application deployment, patching, compliance, and troubleshooting across supported Apple platforms.
Administer and maintain endpoint management solutions, including Jamf Pro and Microsoft Intune.
Develop and maintain device configuration profiles, management policies, restrictions, compliance settings, and security baselines.
Support automated device provisioning and enrollment using Apple Business Manager and Automated Device Enrollment (ADE).
Package, test, deploy, and maintain applications, operating system updates, scripts, and configurations across supported Apple devices.
Manage operating system and application update processes to maintain security, stability, and compliance.
Develop and maintain automation using Bash, Zsh, PowerShell, or similar scripting technologies.
Implement and troubleshoot endpoint security controls, including encryption, certificates, authentication, firewall settings, and endpoint protection.
Monitor device inventory, enrollment status, application deployment, configuration compliance, and endpoint management health.
Analyze and resolve complex endpoint, application, enrollment, connectivity, and device management issues; perform root-cause analysis and implement sustainable solutions.
Support vulnerability remediation, security assessments, endpoint hardening, and compliance initiatives.
Evaluate new Apple hardware, operating system releases, and endpoint management capabilities for security, compatibility, and operational impact.
Support integrations with identity, authentication, certificate, and enterprise security services, including Microsoft Entra ID, Active Directory, SSO, and PKI.
Provide technical guidance to engineers and support teams and contribute to engineering standards and best practices.
Develop and maintain technical documentation, operational procedures, configuration standards, and troubleshooting guides.
Collaborate with cybersecurity, infrastructure, service desk, and customer teams to resolve technical issues and improve endpoint services.
Communicate technical findings and recommendations to customers and stakeholders and participate in client meetings and special projects as required.