System Administrator, macOS

Na Ali'i Consulting & Sales, LLC.•Aberdeen, MD

5d•$95,000 - $125,000•Onsite

About The Position

Nakupuna Solutions is seeking a System Administrator, macOS. The System Administrator, macOS is responsible for installing, configuring, securing, and supporting enterprise Apple macOS systems and related endpoint management technologies to ensure availability, performance, and security. This role may involve managing GovCloud environments, standalone environments, and systems connected to external networks such as NIPRNET, SIPRNET, DREN, JWICS, and NSA.

Requirements

Bachelor’s degree in computer science, IT, or related field
Security+ CE certification
Apple Certified Support Professional (ACSP) or Apple Certified IT Professional (ACITP) certification
3+ years of desktop or endpoint support with macOS administration focus
Experience with enterprise MDM solutions, Apple Business Manager)
Active Secret security clearance required.
Must be a U.S. citizen.

Nice To Haves

Jamf Certified Technician, Administrator, or Expert
CompTIA A+
CompTIA Network+
SecurityX / CASP+
CCNP Security
CISA
FITSP-O
GICSP
SSCP

Responsibilities

Install and configure current and legacy macOS systems, including system preferences, permissions, Terminal, bash/zsh, shell scripting, and enterprise endpoint configurations. Ensure configurations comply with C5ISR policies and procedures across DREN, NIPRNET, SIPRNET, JWICS, laboratory networks, and other supported environments.
Monitor system performance and availability.
Implement system security measures, review logs, and identify issues.
Administer Apple Business Manager (ABM), Apple School Manager (ASM), Automated Device Enrollment (ADE), Volume Purchase Program (VPP), and Mobile Device Management (MDM) platforms such as Jamf Pro, Kandji, Mosyle, Microsoft Intune, or Workspace ONE for zero-touch deployment, configuration profiles, policy enforcement, and device management.
Provide administration, planning, and execution support for Amazon Web Services and Microsoft Azure environments.
Develop automation using bash, zsh, Python, or AppleScript and support software packaging using .pkg and .dmg installers.
Maintain system documentation.
Conduct operating system, application, and security patch management.
Configure and maintain storage systems.
Provision, deploy, inventory, maintain, and decommission Apple devices throughout their lifecycle.
Configure identity integration with Active Directory, Microsoft Entra ID (Azure AD), Okta, SSO, and Platform SSO.
Support networking services including DNS, DHCP, VPN, Wi-Fi, and certificate management.
Coordinate support requests with the Network Enterprise Center (NEC) regarding provisioning, performance, resource allocation, and related requests.
Ensure managed systems comply with DISA STIGs, SRGs, CIS Benchmarks, NIST guidance, and other cybersecurity requirements while supporting FileVault, Gatekeeper, XProtect, CrowdStrike, SentinelOne, Apple Silicon (M-series), Intel hardware, Apple warranty, and AppleCare processes.
Coordinate with the DREN Network Operations Center (NOC) and Security, Network, and Identity and Access Management (IAM) teams as required.
Provide Tier 2/3 support for macOS hardware, operating systems, enterprise applications, and software conflicts.
Support ACAS scans, IA vulnerability compliance, endpoint protection, cybersecurity requirements, and remediation activities.
Apply operating system and security patches to maintain compliance.
Troubleshoot hardware, software, networking, authentication, certificate, and application issues using root-cause analysis.
Develop automation workflows, maintain runbooks, SOPs, and knowledge-base documentation, communicate technical issues to non-technical users, and independently prioritize assigned work.