Senior Microsoft Intune Architect (macOS & Apple Specialist)
Senior Microsoft Intune Architect (macOS & Apple Specialist)
Remote
12 Months+ | 40,000+ Devices
We are seeking a hands-on Architect to lead the design and implementation of an enterprise-grade Apple management environment within Microsoft Intune. You will own the technical strategy for a massive macOS fleet (alongside iOS and Windows), ensuring seamless integration with Apple Business Manager and modern deployment workflows.
Key Responsibilities
Apple-First Architecture: Design and lead the technical architecture for macOS, iOS, and iPadOS within Intune, leveraging Apple Business Manager (ABM) and Automated Device Enrollment (ADE).
Modern Management: Implement Declarative Device Management (DDM) and Platform SSO to modernize the Mac user experience and security posture.
Policy & Profile Engineering: Design configuration profiles (system extensions, kernel extensions, TCC) and Shell Scripts to manage complex macOS settings not natively in the Intune UI.
Application Lifecycle: Drive the end-to-end strategy for Mac app deployment using PKG, DMG, VPP (Volume Purchase Program), and third-party patching tools.
Identity & Security Integration: Integrate Intune with Azure AD (Entra ID) and Conditional Access to enforce compliance-based access for Apple endpoints.
Security Posture: Establish endpoint security controls including FileVault encryption, Microsoft Defender for Endpoint (macOS), and Gatekeeper management.
Automation & Graph API: Utilize PowerShell, Bash, and Microsoft Graph API to automate device lifecycle tasks, reporting, and custom remediation.
Hybrid Fleet Support: Oversee the integration of Windows (Autopilot) and Mobile (Android Enterprise) into a unified, secure, and scalable global tenant.
Compliance Governance: Define RBAC, tenant design, and Compliance Policies to ensure all Apple devices meet strict enterprise and manufacturing-sector standards.
Technical Leadership: Mentor deployment engineers and collaborate with Networking/Security teams to ensure a seamless "Zero Touch" rollout.
Qualifications
Expertise: 5+ years of experience architecting Microsoft Intune specifically for macOS at an enterprise scale (10,000+ nodes).
Deep Knowledge: Expert-level understanding of Apple-specific frameworks (APNs, ADE, VPP, and Configuration Profiles).
Scripting: Proficient in Bash and Zsh for macOS customization and PowerShell for Intune/Graph API automation.
Security: Strong background in Microsoft Defender for Endpoint and Conditional Access.
Environment: Experience in Manufacturing/Lab environments is a plus.
Apply tot his job
Apply To this Job
Remote
12 Months+ | 40,000+ Devices
We are seeking a hands-on Architect to lead the design and implementation of an enterprise-grade Apple management environment within Microsoft Intune. You will own the technical strategy for a massive macOS fleet (alongside iOS and Windows), ensuring seamless integration with Apple Business Manager and modern deployment workflows.
Key Responsibilities
Apple-First Architecture: Design and lead the technical architecture for macOS, iOS, and iPadOS within Intune, leveraging Apple Business Manager (ABM) and Automated Device Enrollment (ADE).
Modern Management: Implement Declarative Device Management (DDM) and Platform SSO to modernize the Mac user experience and security posture.
Policy & Profile Engineering: Design configuration profiles (system extensions, kernel extensions, TCC) and Shell Scripts to manage complex macOS settings not natively in the Intune UI.
Application Lifecycle: Drive the end-to-end strategy for Mac app deployment using PKG, DMG, VPP (Volume Purchase Program), and third-party patching tools.
Identity & Security Integration: Integrate Intune with Azure AD (Entra ID) and Conditional Access to enforce compliance-based access for Apple endpoints.
Security Posture: Establish endpoint security controls including FileVault encryption, Microsoft Defender for Endpoint (macOS), and Gatekeeper management.
Automation & Graph API: Utilize PowerShell, Bash, and Microsoft Graph API to automate device lifecycle tasks, reporting, and custom remediation.
Hybrid Fleet Support: Oversee the integration of Windows (Autopilot) and Mobile (Android Enterprise) into a unified, secure, and scalable global tenant.
Compliance Governance: Define RBAC, tenant design, and Compliance Policies to ensure all Apple devices meet strict enterprise and manufacturing-sector standards.
Technical Leadership: Mentor deployment engineers and collaborate with Networking/Security teams to ensure a seamless "Zero Touch" rollout.
Qualifications
Expertise: 5+ years of experience architecting Microsoft Intune specifically for macOS at an enterprise scale (10,000+ nodes).
Deep Knowledge: Expert-level understanding of Apple-specific frameworks (APNs, ADE, VPP, and Configuration Profiles).
Scripting: Proficient in Bash and Zsh for macOS customization and PowerShell for Intune/Graph API automation.
Security: Strong background in Microsoft Defender for Endpoint and Conditional Access.
Environment: Experience in Manufacturing/Lab environments is a plus.
Apply tot his job
Apply To this Job