L2 Endpoint Engineer – Apple Device Management (JAMF)

About the role

The L2 Endpoint Engineer is responsible for administering, supporting and optimizing Apple device management platforms, primarily JAMF Pro, across macOS and iOS/iPadOS devices. The role covers the full device lifecycle, application packaging, patching, policy enforcement and compliance management to ensure a seamless user experience.

Key responsibilities

• Administer the JAMF Pro environment, including device inventory, smart groups, configuration profiles and enrollment workflows (DEP/Automated Device Enrollment).
• Manage the complete device lifecycle – enrollment, provisioning, configuration and de‑commissioning for macOS and iOS/iPadOS devices.
• Package and deploy macOS applications using PKG/DMG formats and JAMF policies, handling testing, validation and troubleshooting of installation failures.
• Define and execute OS and third‑party patching policies, monitor compliance and resolve deployment issues.
• Create and maintain configuration profiles (Wi‑Fi, VPN, security), restrictions and compliance policies, integrating with Apple Business Manager, Azure AD or Okta.
• Act as L2 resolver for enrollment, deployment and patch failures, perform root‑cause analysis and escalate to L3 or vendors when needed.
• Automate routine tasks with Bash/Shell scripts and basic Python, and generate compliance and deployment reports.

Required profile

• Strong troubleshooting mindset with deep understanding of Apple ecosystem behavior.
• Clear communication skills for global user support and stakeholder interaction.
• Attention to detail to adhere to strict Apple policies and security baselines.

Required skills

• Hands‑on experience with JAMF Pro administration and Apple device management (macOS, iOS/iPadOS).
• Knowledge of Apple Business Manager, Automated Device Enrollment (DEP) and Volume Purchase Program (VPP).
• Application packaging using PKG/DMG and deployment via JAMF policies.
• Bash/Shell scripting (mandatory) and basic Python.
• Integration experience with Azure AD or Okta.
• Familiarity with ITIL processes (incident, problem, change management) and patch compliance reporting.