Systems Engineer

Systems EngineerCorporate Office - ParmaThe Systems Engineer is responsible for designing, administering, securing, and continuously improving Apple device management solutions across the organization within the Microsoft Intune and Entra ID ecosystems. This role is the primary engineering owner for Apple platforms, including iPads, iPhones, NEO devices, and MacBooks, with a focus on secure, scalable, and as close to zero-touch provisioning as possible.We are seeking a passionate systems engineering professional with strong experience supporting Apple endpoints in enterprise environments, including automated device enrollment, mobile device management, application deployment, identity integration, security baselines, and lifecycle management. This individual will work closely with Information Technology, business partners, security stakeholders, and vendors to modernize endpoint management, improve operational efficiency, and ensure Apple devices are provisioned, secured, monitored, and supported consistently across the organization.The Systems Engineer will be instrumental in implementing and supporting Intune, Entra ID, Apple Business Manager, Microsoft 365 integrated authentication, MFA, Defender for Endpoint, conditional access, app protection policies, compliance policies, and related endpoint security solutions.As a Systems Engineer, you will support the following areas:Design, implement, administer, and continuously improve Apple device management solutions within Microsoft Intune, Entra ID, and Apple Business ManagerOwn engineering standards for iPads, iPhones, NEO devices, and MacBooks, including enrollment, configuration, security, compliance, application deployment, and lifecycle managementImplement and support zero-touch or near-zero-touch provisioning workflows for Apple endpoints, including Automated Device Enrollment, enrollment profiles, device configuration profiles, and user-driven provisioningEngineer and maintain secure Microsoft 365 integrated login experiences across Apple platforms, including Entra ID authentication, conditional access, MFA, SSO extensions, and app protection policiesDeploy, manage, and support applications across Apple devices using Intune, including Microsoft 365 apps, business applications, required applications, available applications, and update policiesImplement and maintain security baselines, compliance policies, device restrictions, encryption requirements, network configurations, certificates, Wi-Fi profiles, VPN profiles, and endpoint protection policiesSupport Microsoft Defender for Endpoint on Apple platforms, including deployment, configuration, monitoring, alerting, reporting, and remediation workflowsPartner with security and infrastructure teams to ensure Apple endpoint solutions align with organizational security, compliance, logging, monitoring, and operational requirementsSupport identity and access management practices across Microsoft Entra ID, Google, and other enterprise systems as needed, including account lifecycle workflows, permissions, MFA, and access reviewsEvaluate, implement, and support Microsoft, Apple, Google, and third-party solutions, including but not limited to Intune, Entra ID, Apple Business Manager, Defender for Endpoint, MFA, DLP, Chromebook console, and related endpoint management platformsSupport large, distributed environments with a focus on automation, standardization, software patching, endpoint compliance, and platform stabilityAutomate manual tasks and improve operational workflows using scripting and modern endpoint management practicesWork closely with business partners, technical teams, and leadership to identify technology solutions that meet business, security, and operational requirementsMeet deadlines and commitments, establish and measure SLAs, and ensure endpoint management services meet business needsCreate, maintain, and improve technical documentation, operational procedures, deployment standards, support runbooks, and engineering diagramsBuild strategic relationships with internal counterparts, external vendors, and service providers, holding them accountable for delivery and support expectationsImplement and support required logging, alerting, reporting, and monitoring tools to provide visibility into endpoint health, compliance, security posture, uptime, and performanceEstablish standardized tools, configurations, and operational procedures for Apple endpoint managementWork across third-party solution providers, understand business needs, define success metrics, and measure outcomesMultitask across several initiatives simultaneously while maintaining quality, security, and operational disciplineEnsure concise and clear written and verbal communicationAdhere to established standards, policies, and proceduresDeliver outstanding human-centric customer service through all support, engineering, and operational effortsAbout You:Bachelor's degree or equivalent experienceStrong experience engineering and supporting Apple device management in enterprise environments, including iOS, iPadOS, and macOSHands-on experience with Microsoft Intune for Apple device enrollment, configuration profiles, compliance policies, application deployment, app protection policies, and endpoint lifecycle managementExperience with Apple Business Manager, Automated Device Enrollment, volume app assignment, managed Apple IDs, and Apple platform management best practicesExperience integrating Apple endpoints with Microsoft Entra ID, Microsoft 365, MFA, conditional access, SSO, and identity-based security controlsExperience with Microsoft Defender for Endpoint, endpoint compliance, security baselines, and device posture reportingExtensive experience with Identity Access Management best practices, implementation, reporting, and auditingHighly organized, able to multitask, with high attention to detail and the ability to prioritizePatient and active listenerAbility to pass federal and state criminal background checks, including FBI/BCIAbility to think independently and contribute to the overall effort without significant directionConfident, self-motivated, and a true team playerSuccessful individuals will be innovative, persuasive, creative, and have a genuine curiosity in their business partner's business; goal and results oriented; optimistic; smart; value-added in mindset; proactive; and able to adapt easily to changeExceptional ability to communicate and foster positive business relationshipsAccountability and personal organization are essentialDemonstrate leadership qualities and abilitiesAbility to establish milestones and ensure execution is on trackAbility to analyze and optimize existing processesStrong scripting abilities within Microsoft cloud environments, Apple endpoint management workflows, and account management automation is preferredExperience with Google cloud environments, Chromebook console, and Google account management is preferredSharePoint permissions and administration experience preferredCompensation and Benefits: The compensation and benefits information below is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law.The annual starting salary for this position is between $90,000 – $110,000 annually. Factors which may affect starting pay within this range may include geography/market, skills, education, experience and other qualifications of the successful candidate.We offer the following benefits for this position, subject to applicable eligibility requirements: medical insurance, dental insurance, vision insurance, 401(k) retirement plan, life insurance, long-term disability insurance, short-term disability insurance, 10 paid holidays annually.Paid Time Off: Paid Time Off to cover sick, vacation, and personal absences.We offer 4 unique health insurance plans to choose from that cover a wide range of deductibles and co-insurance levels. Our goal is to provide you with maximum choice in finding a plan that meets you and your family's needs. Employees can choose from co-pay or High Deductible Health Plans.EQUAL EMPLOYMENT OPPORTUNITYIt is our policy to abide by all federal, state and local laws prohibiting employment discrimination based solely on a person's race, color, religious creed, sex, national origin, ancestry, citizenship status, pregnancy, childbirth, physical disability, mental and/or intellectual disability, age, military status, veteran status (including protected veterans), marital status, registered domestic partner or civil union status, familial status, gender (including sex stereotyping and gender identity or expression), medical condition, genetic information, sexual orientation, or any other protected status except where a reasonable, bona fide occupational qualification exists.