Mac Endpoint Engineer

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week
Overview:

Responsible for engineering, administration, support, and lifecycle management of the enterprise macOS environment. The role partners across infrastructure, security, application, and support teams to deliver secure, compliant, and reliable endpoint services.

Primary Responsibilities:
macOS Engineering & Administration

• Design, implement, and maintain enterprise macOS workstation solutions.
• Manage Apple device lifecycle activities including provisioning, deployment, upgrades, refreshes, and retirement.
• Administer Apple Business Manager (ABM), Automated Device Enrollment (ADE), and device management platforms such as Microsoft Intune and Jamf.
• Develop and maintain macOS configuration profiles, compliance policies, and security baselines.
• Engineer and deploy operating system updates, security patches, and application upgrades.
• Troubleshoot advanced hardware, software, operating system, and integration issues.
• Evaluate new Apple technologies and recommend enterprise adoption strategies.

Endpoint Security & Compliance

• Implement and maintain security controls aligned with enterprise standards.
• Support endpoint protection platforms, encryption technologies, and compliance monitoring.
• Partner with Cybersecurity teams to address vulnerabilities and remediation activities.
• Ensure endpoints remain compliant with regulatory, audit, and internal security requirements.

Application Management

• Package, deploy, and support Mac applications.
• Test application compatibility across macOS releases.
• Support software distribution, configuration management, and rollback procedures.
• Participate in application modernization and packaging initiatives.

Operational Excellence

• Develop automation solutions using PowerShell, Bash, or other scripting tools.
• Create and maintain technical documentation, standards, procedures, and knowledge articles.
• Support incident, problem, and change management processes.
• Participate in on-call support activities as required.
• Lead small-to-medium engineering initiatives and technical projects.

Technical Skills:

• macOS Administration
• Apple Business Manager
• Automated Device Enrollment
• Intine for macOS
• Jamf Pro
• Shell Scripting
• Endpoint Security
• Experience with DDM (Declarative Device Management)
• Jamf API functions
• Platform SSO

Education and Experience Required:

• Combined minimum of 6 years' higher education and/or work experience in systems design, management and/or architecture
• 4+ years of endpoint engineering experience.
• 3+ years supporting enterprise macOS environments.
• Experience with Apple ecosystem technologies.
• Experience with Jamf Pro.
• Knowledge of endpoint security, compliance, and device management best practices.
• Experience scripting and automating administrative functions.
• Strong troubleshooting and analytical skills.

Education and Experience Preferred:

• Experience supporting enterprise Windows environments.
• Knowledge of Microsoft Entra ID, Microsoft 365, and Azure services.
• Experience with enterprise application packaging and deployment.
• Support Microsoft Intune, Configuration Manager (SCCM), and related endpoint management solutions.
• Experience within highly regulated industries such as banking or financial services.

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $97,100.00 - $161,800.00 Annual (USD). The successful candidate's particular combination of knowledge, skills, and experience will inform their specific compensation.

Location
Buffalo, New York, United States of America