MAC Computer Specialist

Position Summary DPR is seeking a highly skilled and forward‑thinking Lead Endpoint Engineer – Apple Platform & Modern Device Management to establish, secure, and scale the enterprise Apple ecosystem across the organization. This role serves as the technical owner of DPR’s Apple platform strategy and is responsible for the architecture, deployment, security, compliance, lifecycle management, and ongoing evolution of macOS devices within a Microsoft‑centric environment. The ideal candidate will combine deep Apple expertise with strong knowledge of Microsoft technologies, ensuring Apple devices are seamlessly integrated with Microsoft Intune, EntraID, Defender for Endpoint, Conditional Access, and other enterprise services. This is a hands‑on engineering role that combines strategy, architecture, and execution. The successful candidate will define enterprise standards, implement automation, improve user experience, and continuously evaluate emerging technologies, including Intune, Jamf and other Apple management solutions, to ensure DPR maintains a secure, scalable, and modern endpoint management platform. This role plays a critical part in enabling workforce productivity while maintaining enterprise‑grade security, compliance, and operational excellence. Key Responsibilities Apple Platform Strategy & Architecture Serve as the technical owner for DPR’s Apple ecosystem and endpoint strategy. Define and maintain enterprise standards for macOS devices. Develop and maintain the Apple platform roadmap. Evaluate and recommend endpoint management architectures, including Intune, Jamf, and emerging Apple management technologies. Provide technical leadership on Apple platform adoption and modernization initiatives. Ensure Apple platform capabilities align with DPR’s security, compliance, and operational objectives. Endpoint Management & Lifecycle Operations Administer and optimize Apple Business Manager (ABM). Design and maintain zero‑touch deployment processes. Manage device enrollment, provisioning, configuration, and retirement processes. Develop and maintain macOS configuration profiles and compliance policies. Implement and maintain software deployment and patch management solutions. Microsoft Integration & Identity Services Integrate Apple devices with Microsoft Intune and Microsoft EntraID. Implement and maintain Platform SSO and modern authentication solutions. Support Conditional Access and device compliance policies. Collaborate with Identity & Access Management teams to strengthen device trust and security posture. Support certificate‑based authentication and password‑less initiatives. Endpoint Security & Compliance Develop and maintain macOS security baselines. Implement and manage FileVault encryption standards. Deploy and optimize Microsoft Defender for Endpoint. Ensure compliance with corporate security policies and regulatory requirements. Monitor endpoint compliance and remediation activities. Align Apple security standards with NIST, CIS Benchmarks, and DPR security requirements. Participate in security reviews, audits, and compliance assessments. Automation & Engineering Develop automation to streamline deployment, compliance, reporting, and lifecycle management processes. Leverage scripting and APIs to improve operational efficiency. Reduce manual provisioning and support activities through automation. Develop monitoring and reporting solutions for Apple endpoint health and compliance. User Experience & Service Improvement Improve the end‑user Apple experience through standardization and automation. Partner with Service Desk and Endpoint Engineering teams to reduce support complexity. Evaluate emerging Apple technologies and features that improve productivity and security. Act as a senior escalation point for complex Apple‑related technical issues. Governance & Platform Optimization Establish and maintain Apple platform standards, procedures, and documentation. Develop operational metrics and dashboards related to enrollment, compliance, security, and lifecycle management. Conduct regular reviews of platform effectiveness and identify improvement opportunities. Continuously assess whether current management platforms adequately support DPR’s Apple environment and recommend enhancements where appropriate. Skills & Competencies Technical & Professional Skills Deep expertise in enterprise macOS administration and architecture. Strong experience with Microsoft Intune and endpoint management. Strong understanding of Microsoft EntraID, Conditional Access, and device compliance. Experience with Apple Business Manager and Apple enrollment technologies. Knowledge of Platform SSO and Apple identity integration. Experience implementing endpoint security controls and compliance programs. Familiarity with JamfPro or other Apple‑focused management platforms. Experience with endpoint automation, scripting, and API integrations. Security & Compliance Strong understanding of endpoint security principles and modern device management. Experience implementing FileVault, EDR/XDR solutions, and security baselines. Familiarity with NIST Cybersecurity Framework, CIS Benchmarks, and enterprise security practices. Experience supporting audit and compliance activities. Leadership & Collaboration Ability to influence technical direction and platform strategy without direct authority. Strong stakeholder engagement skills across Security, Infrastructure, Identity, Procurement, and End User Services. Ability to translate technical concepts into business value and operational outcomes. Strong documentation and communication skills. Analytical & Problem‑Solving Skills Strong troubleshooting and root‑cause analysis capabilities. Ability to assess technology gaps and recommend scalable solutions. Data‑driven decision‑making and continuous improvement mindset. Qualifications Required Bachelor’s degree in Information Technology, Computer Science, Information Systems, or related field, or equivalent experience. 5+ years of endpoint engineering experience. 3+ years of enterprise macOS administration experience. Strong experience with Microsoft Intune and Microsoft EntraID. Experience with Apple Business Manager. Experience supporting enterprise endpoint security controls. Experience designing and implementing endpoint standards and lifecycle processes. Preferred Experience administering JamfPro. Apple Device Support or Apple Deployment & Management certifications. Microsoft Intune Administrator certification. Microsoft Security Administrator certification. Experience operating Apple environments at enterprise scale. Experience with automation and scripting (Bash, Python, PowerShell, APIs). Reporting Structure Reports to: Manager, Endpoint Engineering (or equivalent). Partners with Cybersecurity, Identity & Access Management, Infrastructure, Service Desk, Procurement, Enterprise Architecture, and Collaboration Services. Serves as the technical owner of DPR’s Apple platform and endpoint management strategy and functions as a senior technical lead and subject matter expert for Apple technologies across the enterprise. Equal Employment Opportunity DPR is an equal opportunity employer and prohibits discrimination and harassment of any kind. All employment decisions at DPR are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national or ethnic origin, sex (including pregnancy), age, physical or mental disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, medical history or genetic information, or any other status protected by the laws or regulations in the locations where we operate. DPR will not tolerate discrimination or harassment based on any of these characteristics. Read more in our EEOE Policy. #J-18808-Ljbffr DPR Construction