Senior Apple Platform Engineer

ABOUT PRISM
PRISM is devoted to modernization and innovation across technology, security, and IT enterprise solutions. We are recognized for meeting performance requirements and exceeding customer expectations since 1994. Our culture is founded on relationships, opportunity, and success. Offering comprehensive benefit plans including medical, dental, vision, and 401K along with our people - first approach sustains our reputation as a premier employer.

PRISM is seeking a Senior Apple Platform Engineer. This position is on-site in Quantico, VA.

KEY RESPONSIBILITIES:

• Design, implement, and manage the Apple platform infrastructure (macOS, iOS, iPadOS, and tvOS) within a classified, high-security government environment.
• Lead technical initiatives to deploy, configure, and maintain Apple hardware and software at scale, ensuring uptime and availability in secure settings.
• Develop and deploy scalable solutions using enterprise management tools such as Jamf Pro, Apple Business Manager (ABM), or equivalent.
• Develop and implement compliance frameworks, ensuring all Apple platforms conform to government-mandated policies and cyber governance standards (e.g., STIGs, CIS benchmarks, or related secure configuration baselines).
• Maintain expert-level understanding and provide lifecycle management of the Apple ecosystem, including operating system updates, patch management, and security configurations.
• Create customized scripts (e.g., shell, Python, or Swift) for automation, deployment, and configuration management tasks.
• Engineer solutions to assist with identity management integration, such as SSO (e.g., Okta, Active Directory, or PKI deployments on Apple platforms).
• Troubleshoot complex MacOS and iOS issues while working across cross-functional teams to provide seamless support to end users.
• Collaborate with cybersecurity teams to participate in security audits, vulnerability assessments, and incident response for Apple endpoints.
• Document workflows, technical designs, and operational guides for both technicians and end users to ensure clear communication of platform capabilities and processes.
• Work closely with data security and compliance teams to monitor Apple device adherence to agency-mandated security policies.
• Stay ahead of emerging trends in Apple technologies, tools, and government compliance requirements. Provide recommendations for innovation and modernization strategies.

REQUIRED QUALIFICATIONS (SKILLS/EDUCATION):

• Bachelor's degree and nine (9) years of experience. Four additional years of experience may be considered in lieu of a degree
• DoD 8570 IAT Level II certification (e.g., Security+ CE, CCNA Security).
• Active Top Secret Clearance, required.
• Minimum of 7 years of technical experience managing Apple devices in enterprise IT environments (focused on macOS, iOS, and iPadOS).
• Advanced expertise using and deploying Apple device management platforms/tools like Jamf Pro, Apple Configurator, and/or Apple Business/School Manager.
• Strong scripting and automation skills (e.g., Bash, Python, Swift, or PowerShell).
• In-depth knowledge of Apple security features like Gatekeeper, FileVault, T2/M-series chips, iCloud, and Secure Enclave, as well as their configuration/management at scale.
• Experience working with enterprise identity services such as Active Directory, LDAP, OAuth, SAML, and/or PKI in relation to Apple systems.
• Hands-on experience with large-scale macOS/iOS deployments and software distribution.
• Demonstrated ability to harden and secure devices according to compliance requirements (e.g., DISA STIGs or other federal frameworks).
• Solid understanding of networking fundamentals as they relate to Apple devices (e.g., 802.1x, Wi-Fi profiles, VPN, and MDM configuration).
• Excellent communication skills, including the ability to craft technical documentation tailored to different audiences.

PREFERRED QUALIFICATIONS:

• Apple Certified Support Professional (ACSP), Apple Certified IT Professional (ACiT), or equivalent certification.
• JAMF Certified Administrator or JAMF Certified Expert certification.
• Familiarity with security tools such as Tanium, CrowdStrike, Splunk, or Carbon Black on Apple systems.
• Experience working in a classified or government environment with Knowledge of federal guidance (FIPS, NIST frameworks).
• Familiarity with integrating Apple hardware into cross-platform environments (Windows, Linux, etc.).
• Knowledge of Zero Trust principles and their application to enterprise Apple devices.

REQUIRED SECURITY CLEARANCE:
Active Top Secret, TS/SCI (Required)

PRISM is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.