Senior Macintosh Systems Engineer

Empower AI•Arlington, VA

16h

About The Position

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform® provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have. The result is a government workforce that is exponentially more creative and productive. For more information, visit www.Empower.ai . Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company’s commitment to hiring and supporting active-duty and veteran employees. Empower AI: As the Senior Macintosh Systems Engineer , you’ll serve as a technical lead within the DISA J6 Macintosh Center of Excellence, supporting the design, implementation, security, and operation of an enterprise macOS environment. This role involves developing automated system administration solutions, applying DISA STIGs for security hardening, and serving as the highest escalation point for complex Mac-related issues. You’ll also be responsible for integrating third-party applications and ensuring secure interoperability within an Active Directory-based infrastructure. In assuming this position, you will be a critical contributor to meeting Empower AI's mission: To deliver innovative, cost-effective solutions and services that enable our customers to rapidly adapt to dynamic environments.

Requirements

Clearance Required: US Department of Defense (DOD) Secret clearance or ability to obtain
Proven analytical and problem-solving abilities
Ability to effectively prioritize and execute tasks
Highly self-motivated and directed
Excellent written, oral, and interpersonal communication skills
Team-oriented and skilled in working within a collaborative environment
Ability to document tasks and requirements
Bachelor’s degree in IT or related field—or equivalent experience
10 years of professional IT experience with at least 4 years in Apple/macOS administration or engineering
DOD 8570 IAT-II compliance (e.g. CompTIA Security+)
Strong scripting experience using Bash and AppleScript
Deep understanding of macOS and Apple ecosystem technologies, including Apple Configurator, Apple Business Manager, FileVault, Automated Device Enrollment, and zero-touch provisioning workflows
Proficient with enterprise authentication and directory services such as Active Directory, LDAP, Kerberos, and Single Sign-On (SSO)
Experience with smartcard authentication, pairing methods, and certificates
Knowledge and understanding of PKI, certificate authorities, and Keychain management
Experience installing, configuring, and supporting the following security and endpoint software: Microsoft Defender, Tenable Nessus Agent, Splunk, and Palo Alto GlobalProtect
Jamf 100 – Jamf Certified Associate

Nice To Haves

Jamf 200 – Jamf Certified Tech
Jamf 300 – Jamf Certified Admin
Jamf 370 – Jamf Certified Admin - Jamf Protect
Jamf 400 – Jamf Certified Expert
Apple Mac/macOS certifications
Experience supporting federal government IT environments and compliance requirements
Proficiency with MySQL and PowerShell
Experience integrating macOS devices into Windows-centric enterprise environments

Responsibilities

Lead the development of scalable Mac provisioning workflows and device configurations to support new macOS releases and evolving organizational needs
Oversee maintenance, upgrades, and complex troubleshooting for the Jamf Pro server
Develop, maintain, and optimize advanced scripts using Bash, AppleScript, and the Jamf Pro API to automate workflows and enhance operational efficiency
Design and implement solutions that integrate the macOS environment with the broader enterprise Windows architecture, ensuring seamless compatibility and security compliance
Develop automation methods for system administration, endpoint security, application deployment, and user support to streamline IT operations
Continuously evaluate and implement emerging tools, practices, and technologies to enhance engineering and support capabilities
Provide senior-level engineering support to diagnose and resolve complex issues with macOS and deployed software, collaborating closely with engineering and support personnel
Work with third-party vendors and internal teams to address issues that require escalation, and provide testing and feedback when working towards successful resolution of escalated issues
Administer macOS updates and upgrades using Jamf Pro, as well as open-source software update enforcement tools, ensuring minimal user disruption
Configure, test, and implement DISA STIG requirements in accordance with DOD cybersecurity policies and standards
Create, test, and deploy custom application packages using Jamf Pro to meet enterprise software deployment standards
Create and maintain comprehensive documentation, including network diagrams and SOPs
Provide configuration and support expertise for COTS Mac applications
Support the growth of Junior Mac Engineers through knowledge sharing, hands-on mentoring, and collaborative project work