Title: Senior macOS Intune Engineer (MDM/MAM)
Location: Denver, CO (Hybrid)
Duration: C2H
Position Overview
We are seeking a Senior macOS Intune Engineer to lead the design, implementation, and management of macOS devices using Microsoft Intune (Microsoft Endpoint Manager).
This role is focused on Apple device management within the Microsoft ecosystem, leveraging:
โข Apple Business Manager (ABM)
โข Automated Device Enrollment (ADE)
โข Microsoft Entra ID (Azure AD)
The engineer will implement advanced security, identity, and device management solutions, including:
โข Password less authentication (Secure Enclave, passkeys)
โข FileVault disk encryption
โข Single Sign-On (SSO) integration
The goal is to ensure macOS devices (corporate and BYOD) are secure, compliant, and fully integrated into the enterprise identity and security framework.
________________________________________
Key Responsibilities
1. macOS Endpoint Management (Intune)
โข Architect, deploy, and manage macOS devices using Intune MDM
โข Configure configuration profiles, compliance policies, and restrictions
โข Ensure devices meet enterprise security, performance, and compliance standards
________________________________________
2. Apple Business Manager (ABM) & ADE
โข Integrate Intune with Apple Business Manager
โข Manage Automated Device Enrollment (ADE) for zero-touch provisioning
โข Configure and troubleshoot enrollment profiles and tokens
________________________________________
3. Mobile Application Management (MAM)
โข Manage macOS applications via Intune (App Store + enterprise apps)
โข Use Apple Volume Purchase Program (VPP)
โข Implement app protection policies for corporate and BYOD devices
________________________________________
4. Password less Authentication & SSO
โข Implement Microsoft Entra ID Platform SSO
โข Deploy Microsoft Enterprise SSO plug-in for macOS
โข Enable Secure Enclave-based authentication (Touch ID, passkeys)
โข Link macOS accounts with Entra ID for seamless authentication
________________________________________
5. Device Security & Encryption
โข Deploy and manage FileVault encryption via Intune (key escrow & recovery)
โข Enforce endpoint protection and compliance policies
โข Integrate Microsoft Defender for Endpoint (macOS)
โข Apply device security controls (password policies, screen lock, etc.)
________________________________________
6. BYOD Management
โข Define and implement BYOD strategies for macOS
โข Use Intune MAM policies to protect corporate data
โข Apply Conditional Access policies based on compliance
________________________________________
7. Identity & Access Integration
โข Integrate macOS devices with Microsoft Entra ID
โข Implement Conditional Access, MFA, and identity protection
โข Support SSO across enterprise applications
________________________________________
8. Security Best Practices
โข Apply Zero Trust principles and least privilege access
โข Monitor and mitigate identity-based threats (e.g., password spray attacks)
โข Implement identity protection and smart lockout strategies
________________________________________
9. Troubleshooting & Support
โข Troubleshoot:ย
o Intune enrollment issues
o SSO and authentication failures
o FileVault / SecureToken issues
โข Perform root cause analysis and implement fixes
โข Resolve policy conflicts and configuration issues
________________________________________
10. Documentation & Leadership
โข Create runbooks, policies, and technical documentation
โข Train and mentor IT support teams
โข Continuously improve macOS management processes
________________________________________
Required Qualifications
Experience
โข 5+ years managing macOS in enterprise environments
โข 3+ years hands-on experience with Microsoft Intune (macOS focus)
________________________________________
Technical Skills
Intune & MDM
โข Strong expertise in Intune MDM/MAM for macOS
โข Experience with configuration profiles, compliance policies, and app protection
Apple Ecosystem
โข Hands-on experience with Apple Business Manager (ABM) and ADE
โข Understanding of Apple MDM protocols and macOS device management
Security & Encryption
โข Experience with FileVault deployment and key management
โข Knowledge of Secure Enclave, SecureToken, and macOS security features
Identity & Access Management
โข Strong knowledge of Microsoft Entra ID (Azure AD)
โข Experience with:ย
o SSO (SAML, OAuth, OIDC, Kerberos)
o Conditional Access
o Identity Protection
Automation & Scripting
โข Proficiency in Bash, PowerShell, or Python
โข Experience using Microsoft Graph API for automation
________________________________________
Preferred Qualifications
โข Microsoft certifications (Modern Desktop, Enterprise Admin, Identity Admin)
โข Apple certifications (ACSP or equivalent)
โข Microsoft Defender for Endpoint (macOS)
โข Experience with Zero Trust, NIST, or CIS frameworks
โข Exposure to Microsoft Sentinel or identity monitoring tools