Apple/macOS Subject Matter Expert (SME)

Apple/macOS Subject Matter Expert (SME)
Company: Horizon Global Partners (HgP)
Employment Type: Full-Time
Clearance Requirement: Active Top Secret (TS) Security Clearance Required
Position Summary
Horizon Global Partners (HgP) is seeking an experienced Apple/macOS Subject Matter Expert (SME) to support a Federal Government customer by engineering, securing, and managing enterprise Apple device environments. The successful candidate will serve as the technical authority for macOS endpoint engineering, developing secure workstation baselines, administering JAMF Pro and Apple Business Manager, and supporting the full lifecycle of Apple devices within a highly secure enterprise environment.
This position requires extensive experience with enterprise macOS administration, endpoint security, device lifecycle management, and Apple ecosystem technologies. The Apple/macOS SME will collaborate closely with Endpoint Engineering, Cybersecurity, Identity Management, and Service Desk teams to ensure secure, compliant, and efficient Apple device operations.
________________________________________
Key Responsibilities
Apple Endpoint Engineering
• Design, implement, and maintain secure macOS workstation images and baseline configurations.
• Engineer standardized macOS deployments for on-site, remote, and Virtual Desktop Infrastructure (VDI) users.
• Develop and maintain macOS security baselines aligned with organizational security standards.
• Validate image integrity and manage version control throughout the release lifecycle.
JAMF Pro Administration
• Administer and maintain JAMF Pro for enterprise macOS device management.
• Configure device enrollment, compliance policies, configuration profiles, and application deployments.
• Manage software updates, operating system upgrades, and security patches.
• Automate endpoint provisioning and management using JAMF Pro best practices.
Apple Business Manager
• Administer Apple Business Manager (ABM) for automated device enrollment and lifecycle management.
• Integrate Apple Business Manager with JAMF Pro and identity management platforms.
• Support automated device provisioning, enrollment, reassignment, retirement, and secure device wipe.
• Maintain accurate asset inventory and ownership records.
Endpoint Security
• Implement and maintain secure macOS configuration baselines.
• Support passwordless authentication and hardware-backed credentials where applicable.
• Ensure compliance with enterprise security policies and Zero Trust principles.
• Support endpoint encryption, compliance monitoring, and remediation activities.
Patch & Lifecycle Management
• Manage macOS operating system updates and application patching.
• Validate software deployments and perform rollback procedures when necessary.
• Maintain device lifecycle documentation and operational procedures.
Monitoring & Incident Support
• Configure endpoint logging and telemetry.
• Support SIEM and Endpoint Detection & Response (EDR) integrations.
• Assist with forensic data collection and incident response investigations.
• Troubleshoot complex macOS endpoint issues and provide engineering-level support.
Documentation & Knowledge Transfer
• Develop and maintain:
o macOS engineering standards
o JAMF administration guides
o Apple Business Manager procedures
o Device provisioning documentation
o Patch management runbooks
o Knowledge base articles
• Conduct knowledge transfer sessions for engineering and Service Desk personnel.
________________________________________
Required Qualifications
• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field (or equivalent experience).
• Minimum 8 years of Information Technology, Endpoint Engineering, or Enterprise Systems Administration experience.
• Minimum 5 years administering enterprise macOS environments.
• Extensive hands-on experience with JAMF Pro administration.
• Experience administering Apple Business Manager.
• Experience developing and maintaining secure macOS baseline configurations.
• Experience supporting enterprise Apple device enrollment, provisioning, and lifecycle management.
• Experience with macOS patch management and endpoint compliance.
• Experience integrating Apple endpoints with Microsoft Entra ID, Active Directory, or enterprise identity solutions.
• Excellent troubleshooting, documentation, and communication skills.
________________________________________
Required Technical Skills
• macOS
• JAMF Pro
• Apple Business Manager
• Apple Device Enrollment
• Apple Automated Device Enrollment (ADE)
• Apple Push Notification Service (APNs)
• FileVault
• Gatekeeper
• XProtect
• Microsoft Entra ID
• Active Directory
• Microsoft Intune (integration)
• Endpoint Security
• Endpoint Compliance
• Device Lifecycle Management
• Endpoint Logging
• SIEM
• EDR
• VDI
• PowerShell (basic integration)
• Shell Scripting (Bash/Zsh)
________________________________________
Required Credentials
• Active Top Secret (TS) Security Clearance required.
• Demonstrated enterprise JAMF Pro administration experience is required.
________________________________________
Preferred Certifications
• Apple Device Support
• Apple Deployment and Management
• JAMF Certified Associate
• JAMF Certified Technician
• JAMF Certified Administrator
• CompTIA Security+
• ITIL Foundation v4
________________________________________
Preferred Experience
• Federal Government or DoD enterprise environments
• NIST SP 800-53 compliance
• Zero Trust Architecture
• Microsoft Intune integration
• Microsoft Defender for Endpoint
• Microsoft Sentinel
• Secure Apple endpoint engineering
• Enterprise endpoint lifecycle management
________________________________________
Why Join Horizon Global Partners?
At Horizon Global Partners, you’ll support mission-critical Federal Government programs by leading enterprise Apple endpoint engineering initiatives. You’ll work alongside experienced infrastructure and cybersecurity professionals to build, secure, and manage modern macOS environments while supporting critical government operations.