Systems Engineer​/Jamf Pro Senior

Location

Location:

Bethesda (2 Days Onsite / 3 Days Remote ) - May increase as Client needs change

Systems Engineer / Jamf Pro Senior

Public Trust

We are seeking a Systems Engineer / Jamf Pro Senior for our client at the NIH. This role serves as the technical lead for Apple/macOS endpoint management using Jamf Pro, supporting a mixed enterprise environment of approximately 450+ endpoints (Windows/macOS/Linux) including about 100+ Macs primarily located across NIH campus facilities.

The Systems Engineer / Jamf Pro Senior will own the engineering and operational management of the macOS fleet—including imaging/provisioning, configuration management, patching, software packaging, and self-service enablement—while ensuring alignment with Client security policies, lifecycle standards, and service delivery expectations. The position works closely with the Service Desk, Security, and Server teams and partners with NIH enterprise IT organizations to maintain secure, reliable, and highly available IT services for a scientific and administrative customer base.

• Serve as the primary administrator and technical lead for Jamf Pro.
• Create and maintain software packages for deployment (PKG workflows, testing, version control, and rollout planning).
• Develop scripts (e.g., Bash/Python) to automate deployments, configuration, remediation, and reporting.
• Create and manage configuration profiles to deploy settings, restrictions, and compliance baselines.
• Lead patch management for macOS applications and operating systems; coordinate update waves and validate compliance.
• Manage device enrollment, imaging, and provisioning tasks (including templates/workflows for mass deployments).
• Administer Jamf Self Service (catalog design, user experience, scoped software availability, and adoption).
• Manage and maintain Apple Business Manager (device assignments, enrollment workflows, and integration support).
• Test newly released macOS versions and key software; validate compatibility, develop deployment plans, and prepare for enterprise‑wide rollout.
• Support API integrations, including integration with LAPS (as applicable to the environment).

• Own macOS base image standards
  , including:
  • base build configuration
  • packages for deployment
  • provisioning templates for imaging and onboarding

• Maintain readiness of Mac loaner laptops (patched, current configuration, deployable on demand).
• Support annual refresh and rollout activities, contributing to delivery of 100–200 endpoints annually across the enterprise (Windows and Mac; Mac led via Jamf).

• Remediate vulnerabilities on macOS endpoints within NIH‑mandated timelines in coordination with the ISSO and IT leadership.
• Proactively track and mitigate end‑of‑life (EOL) operating systems/applications; plan upgrades/migrations ahead of EOL dates and elevate waiver needs when unavoidable.
• Support endpoint hardening practices and ensure configurations align with security requirements and least‑privilege access.

• Manage and maintain Client Service Accounts as assigned (documentation, access controls, credential hygiene, and operational continuity).
• Perform Active Directory administration tasks relevant to endpoint operations and user access support.
• Support enterprise tooling and user productivity ecosystems, including integration touchpoints with:
  • Microsoft Office 365
  • NIH enterprise services and authentication workflows (as applicable)

• Support Adobe license management and related endpoint deployment/licensing workflows.
• Maintain application currency through structured testing, packaging, and phased deployments.

• Work within NIH Service Now for ticket queue management, escalations, customer communications, and documentation of all work performed.
• Provide expert escalation support and mentoring to junior technicians; contribute to reducing repeat incidents through SOPs and…