macOS Enterprise Architect - Multi-Tenant Strategy & Endpoint Lifecycle

CirrusLabs macOS Enterprise Architect OpportunityWe are a premier technology consultancy supporting a Fortune 50 enterprise technology organization in the execution of high-impact, strategic transformation initiatives. As part of an enterprise-wide multi-tenancy and organizational realignment program, we are seeking a macOS Enterprise Architect to lead the strategy, planning, and lifecycle enablement for Apple macOS endpoints within a future-state multi-tenant operating model.This is a strategic and technically hands-on role focused on tenant ownership, endpoint policy standardization, patching, software distribution, identity management, and tool integration specific to the Apple ecosystem. The ideal candidate will possess deep experience with macOS enterprise management across platforms such as JAMF, Intune, and Entra ID, and will demonstrate the ability to collaborate across cybersecurity, infrastructure, identity, and GRC stakeholder teams.As the macOS Enterprise Architect, you will define and drive the architecture for macOS lifecycle management in a large-scale, multi-tenant enterprise environment. You will evaluate and optimize tooling for device enrollment, app deployment, authentication, and compliance—supporting enterprise ownership transitions across organizational domains. You will also guide identity, MDM, and MAM integrations while aligning macOS strategy with overall risk and operational objectives.Collaboration across Windows and hybrid platform architects, endpoint engineering, and security stakeholders will be key to ensuring macOS devices are securely and consistently managed at scale.Key ResponsibilitiesArchitect the macOS strategy and governance model for multi-tenant environmentsLead initiatives related to Apple Business Manager (ABM), Push Certificate lifecycle, and JAMF Pro environment configurationDesign enrollment workflows (kitted vs. out-of-box), authentication flows, and provisioning modelsAssess and refine macOS deployment strategies, configuration profiles, and self-service application catalogsSupport migration planning and testing across managed Mac environmentsEstablish policy baselines aligned to industry and internal standards (e.g., CIS Benchmarks)Integrate with enterprise identity platforms (e.g., Entra ID) and supporting toolingCollaborate with vendors, Apple support, and internal teams for MDM/ABM coordinationAlign macOS architectural decisions with enterprise security posture strategy (e.g., Prisma Cloud, ServiceNow)Required Qualifications8+ years of experience in macOS platform engineering or architecture in enterprise environmentsProven hands-on experience with JAMF Pro, ABM, Intune, and certificate lifecycle managementExpertise in Apple device provisioning, PreStage profiles, and modern authentication modelsKnowledge of macOS hardening techniques and compliance benchmarks (e.g., CIS, FileVault, Gatekeeper)Experience supporting tenant transitions or mergers involving Apple endpointsScripting and automation capabilities (e.g., Bash, Python, Swift)Strong communication skills and comfort interfacing across IT, cyber, and operations leadershipPreferred QualificationsExperience leading tenant/domain transition projects in a large enterpriseFamiliarity with tools such as AutoPkg, Munki, Nudge, and Extension AttributesExperience working with Apple and Mac hardware vendors for enterprise integrationExposure to enterprise posture tools such as Prisma Cloud or workflow platforms like ServiceNowKnowledge of cross-platform endpoint strategy in hybrid environments (e.g., SCCM, Windows Autopilot)Why Join Us?Play a lead role in defining and implementing secure, scalable macOS management at enterprise scaleSupport a highly confidential transformation initiative with visibility across leadership teamsCollaborate across cloud, infrastructure, cyber, and identity domainsHelp shape a modern endpoint strategy that aligns with broader security posture goalsEngage in a remote-first opportunity with long-term potential and strategic impact CirrusLabs