SENIOR JAMF ENGINEER

Engagement Type: Contractor
Duration: 6–12 months, with potential for extension

ABOUT THE ENGAGEMENT

Our client is seeking a senior-level Jamf Engineer to support a targeted engagement focused on macOS endpoint hardening, compliance alignment, and Apple device management maturity. This is a hands-on technical role — the right candidate will be comfortable operating independently in a fast-moving enterprise environment and delivering measurable security improvements across our Apple fleet.

You will work directly with the IT Security, IT Management, and Security Engineering teams to implement configuration baselines, close compliance gaps, and build durable tooling around Jamf Pro.

KEY RESPONSIBILITIES

macOS Endpoint Hardening

Implement and enforce CIS Benchmark (Level 1 & 2) or NIST 800-179 macOS security baselines via Jamf Pro configuration profiles and scripts
Audit existing endpoint configurations, identify deviations, and remediate at scale
Develop and maintain hardening scripts (bash/zsh/Python) for deployment via Jamf policies
Enforce software update compliance and define patch cadences that meet Cyber Essentials Plus and SOC 2 requirements

Jamf Pro Administration

Manage and optimize Jamf Pro infrastructure including smart/static groups, scoping logic, policies, patch management, and extension attributes
Build and maintain an organized, auditable Jamf environment with consistent naming conventions and
policy hygiene
Develop Self Service offerings that support end users while maintaining security guardrails
Integrate Jamf with enterprise tools including Zscaler (ZPA/ZIA), Google Workspace, and identity providers for conditional access enforcement

Zero Trust & Conditional Access

Configure device compliance signals from Jamf to feed into Zero Trust Network Access (ZTNA) policy decisions (Zscaler ZPA/ZIA integration experience preferred)
Support certificate-based authentication and client-side MDM enrollment workflows
Work alongside SecEng to define and enforce device trust posture as a condition of resource access

Compliance & Documentation

Map Jamf configurations to compliance controls (CIS, NIST, Cyber Essentials Plus, SOC 2)
Produce clear technical documentation — runbooks, architecture decisions, and evidence artifacts for audits
Identify and track remediation of compliance gaps across the macOS fleet

REQUIRED QUALIFICATIONS

5+ years of hands-on Jamf Pro administration in an enterprise environment (500+ managed devices)
Deep expertise in macOS security hardening — CIS Benchmarks, configuration profiles, kernel extensions, and SIP/PPPC/TCC management
Proficiency in scripting for Jamf deployment: bash, zsh, and/or Python
Demonstrated experience implementing or auditing against a recognized security framework (CIS, NIST, SOC 2, or equivalent)
Ability to work autonomously, prioritize effectively, and deliver within a defined scope
Strong written communication skills — documentation is a first-class deliverable

Senior JAMF Engineer (Apple)