Apple Platform Engineer with Security Clearance

Senior Apple Platform Engineeer Clearance: Active Top Secret, TS/SCI (Required) Key Responsibilities:
• Design, implement, and manage the Apple platform infrastructure (macOS, iOS, iPadOS, and tvOS) within a classified, high-security government environment. • Lead technical initiatives to deploy, configure, and maintain Apple hardware and software at scale, ensuring uptime and availability in secure settings. • Develop and deploy scalable solutions using enterprise management tools such as Jamf Pro, Apple Business Manager (ABM), or equivalent. • Develop and implement compliance frameworks, ensuring all Apple platforms conform to government-mandated policies and cyber governance standards (e.g., STIGs, CIS benchmarks, or related secure configuration baselines). • Maintain expert-level understanding and provide lifecycle management of the Apple ecosystem, including operating system updates, patch management, and security configurations. • Create customized scripts (e.g., shell, Python, or Swift) for automation, deployment, and configuration management tasks. • Engineer solutions to assist with identity management integration, such as SSO (e.g., Okta, Active Directory, or PKI deployments on Apple platforms). • Troubleshoot complex MacOS and iOS issues while working across cross-functional teams to provide seamless support to end users.
• Collaborate with cybersecurity teams to participate in security audits, vulnerability assessments, and incident response for Apple endpoints. • Document workflows, technical designs, and operational guides for both technicians and end users to ensure clear communication of platform capabilities and processes. • Work closely with data security and compliance teams to monitor Apple device adherence to agency-mandated security policies. • Stay ahead of emerging trends in Apple technologies, tools, and government compliance requirements. Provide recommendations for innovation and modernization strategies. Required Qualifications:
• Bachelor's degree and nine (9) years of experience. Four additional years of experience may be considered in lieu of a degree
• DoD 8570 IAT Level II certification (e.g., Security+ CE, CCNA Security). • Active Top Secret Clearance, required. • Minimum of 7 years of technical experience managing Apple devices in enterprise IT environments (focused on macOS, iOS, and iPadOS). • Advanced expertise using and deploying Apple device management platforms/tools like Jamf Pro, Apple Configurator, and/or Apple Business/School Manager. • Strong scripting and automation skills (e.g., Bash, Python, Swift, or PowerShell). • In-depth knowledge of Apple security features like Gatekeeper, FileVault, T2/M-series chips, iCloud, and Secure Enclave, as well as their configuration/management at scale. • Experience working with enterprise identity services such as Active Directory, LDAP, OAuth, SAML, and/or PKI in relation to Apple systems. • Hands-on experience with large-scale macOS/iOS deployments and software distribution. • Demonstrated ability to harden and secure devices according to compliance requirements (e.g., DISA STIGs or other federal frameworks). • Solid understanding of networking fundamentals as they relate to Apple devices (e.g., 802.1x, Wi-Fi profiles, VPN, and MDM configuration). • Excellent communication skills, including the ability to craft technical documentation tailored to different audiences. Desired Qualifications: • Apple Certified Support Professional (ACSP), Apple Certified IT Professional (ACiT), or equivalent certification. • JAMF Certified Administrator or JAMF Certified Expert certification. • Familiarity with security tools such as Tanium, CrowdStrike, Splunk, or Carbon Black on Apple systems. • Experience working in a classified or government environment with Knowledge of federal guidance (FIPS, NIST frameworks). • Familiarity with integrating Apple hardware into cross-platform environments (Windows, Linux, etc.). • Knowledge of Zero Trust principles and their application to enterprise Apple devices.