The role involves developing and implementing information security policies and procedures, collaborating on incident response, and promoting a culture of security across the organization.
macOS & Jamf Automation Specialist
📜 Description
- Design and maintain automation for macOS enrolment, provisioning, configuration, application delivery, updates, and device retirement using Jamf Pro.
- Build reusable scripts, tools, and workflows using shell scripting, Python, Jamf APIs, and other appropriate technologies.
- Administer and automate Jamf policies, configuration profiles, and lifecycle workflows.
- Integrate Jamf Pro and Apple Business Manager with identity, security, and service-management platforms.
- Apply Git, CI/CD, automated testing, and configuration-as-code practices for controlled and auditable changes.
🛠️ Requirements
- Jamf 300 certification.
- 4+ years of experience engineering and automating macOS services in a modern enterprise environment.
- Deep hands-on expertise with Jamf Pro, including policies, profiles, smart groups, extension attributes, inventory, application deployment and API-based administration.
- Strong knowledge of macOS management, Apple Business Manager, Automated Device Enrollment, declarative device management and Apple security controls.
- Ability to build production-quality automation using shell scripting, Python, REST APIs and structured data formats, supported by Git, CI/CD, testing, secrets management, Jamf webhooks and code review.
- Experience automating macOS application packaging, deployment, patching and vulnerability remediation; a bachelor’s degree in IT or Computer Science, or equivalent practical experience.
- Experience with identity integrations, Platform SSO, certificate services, zero-touch deployment and device trust.
- Knowledge of Installomator, swiftDialog, Nudge, or similar community and enterprise macOS automation tooling.
- Experience integrating Jamf with ServiceNow, asset-management, security, observability or data platforms.
- Cloud services, serverless functions, SQL or reporting technologies used to host integrations and analyse endpoint data.
✨ Benefits
- A competitive compensation package, of course.
- Time to support life outside of work, with enhanced parental leave plus paid leave to care for loved ones and volunteer in local
- Improve your home office with a setup budget and get extra support with a monthly allowance.
- Enjoy options to work from your home country and abroad for a set number of days each year, to visit family and friends
- Take the holidays you want with a competitive holiday plan, plus an extra day off to celebrate your birthday.
- Join annual events like our Hackathon and DevDays to bring your ideas to life with talented teammates from around the world.
- Become a part of our inclusive global culture and have the chance to collaborate with a diverse community – we have over 80 nationalities
- Find out more about our global benefits and enjoy additional local benefits tailored to your location.
Full job description
You will replace repetitive administration and one-off scripts with maintainable automation for device enrolment, configuration, application delivery, patching, compliance and lifecycle management. Working across Jamf Pro, Apple Business Manager, identity, security, asset and service-management platforms, you will build integrations and workflows that make Apple device services easier to operate, measure and support.
Engineering mindset
Automation is the product, not an afterthought. We are looking for someone who sees a manual Jamf task, fragile policy or recurring Mac support issue and asks, “How can we make this reliable, reusable and self-service?”
You should be comfortable working from Apple and Jamf documentation, investigating unfamiliar behaviours and translating operational requirements into production-quality automation. Your solutions account for failure, test changes before release, scale to an enterprise environment, provide useful telemetry and favour reusable frameworks over isolated scripts. You take ownership from design through operation, document your work and balance long-term platform improvements with immediate business needs.
What success looks like
You will measurably reduce manual effort, deployment lead time and configuration drift across the macOS estate. Enrollment, configuration, software delivery, patching, security compliance and device lifecycle processes will become increasingly automated, observable, auditable and recoverable.
Over time, you will establish a scalable Apple endpoint automation model based on Jamf Pro, APIs, version-controlled code, release pipelines and shared engineering standards rather than manual platform administration.
What you'll do:
macOS Platform & Jamf Automation
-
Design and maintain automation for macOS enrolment, provisioning, configuration, application delivery, updates and device retirement using Jamf Pro.
-
Build reusable scripts, tools and workflows using shell scripting, Python, Jamf APIs and other appropriate technologies.
-
Administer and automate Jamf policies, configuration profiles, Jamf Blueprints, Jamf compliance, extension attributes, smart groups, packages and lifecycle workflows.
-
Integrate Jamf Pro and Apple Business Manager with identity, security, asset, infrastructure and service-management platforms.
-
Apply Git, CI/CD, automated testing and configuration-as-code practices so Apple platform changes are controlled, repeatable and auditable.
Security, Compliance & Observability
-
Translate macOS security and compliance requirements into Jamf configuration profiles, automated controls and measurable outcomes.
-
Automate macOS and third-party application patching, vulnerability remediation and exception handling.
-
Build guardrails for FileVault, endpoint protection, authentication, privacy controls and device compliance.
-
Create inventory, telemetry, dashboards and alerting that provide actionable visibility into automation performance, Mac health and risk.
-
Partner with Security teams to automate evidence collection, audit reporting and remediation workflows for the Apple estate.
Engineering, Lifecycle & Support
-
Define the macOS and Jamf automation architecture, engineering standards and roadmap for a global Apple device service.
-
Engineer automated packaging, deployment, update and rollback pipelines for macOS applications.
-
Evaluate Jamf, Apple and related ecosystem capabilities, APIs and emerging technologies to simplify or extend the service.
-
Troubleshoot complex failures across macOS, Jamf, identity, networking, security and application-delivery services.
-
Convert recurring Mac incidents and support escalations into automated detection, remediation or prevention.
-
Document designs, code, operating procedures and support models, and enable support teams to use them effectively.
What you'll need:
-
Jamf 300 certification.
-
4+ years of experience engineering and automating macOS services in a modern enterprise environment.
-
Deep hands-on expertise with Jamf Pro, including policies, profiles, smart groups, extension attributes, inventory, application deployment and API-based administration.
-
Strong knowledge of macOS management, Apple Business Manager, Automated Device Enrollment, declarative device management and Apple security controls.
-
Ability to build production-quality automation using shell scripting, Python, REST APIs and structured data formats, supported by Git, CI/CD, testing, secrets management, Jamf webhooks and code review.
-
Experience automating macOS application packaging, deployment, patching and vulnerability remediation; a bachelor’s degree in IT or Computer Science, or equivalent practical experience.
Additional experience that would be valuable:
-
Experience with identity integrations, Platform SSO, certificate services, zero-touch deployment and device trust.
-
Knowledge of Installomator, swiftDialog, Nudge, or similar community and enterprise macOS automation tooling.
-
Experience integrating Jamf with ServiceNow, asset-management, security, observability or data platforms.
-
Cloud services, serverless functions, SQL or reporting technologies used to host integrations and analyse endpoint data.
-
Familiarity with Microsoft Intune, Linux or mobile device management in a broader endpoint environment.
Similar jobs
Windows System Administrator
The Windows System Administrator will manage Azure cloud infrastructure, support Windows Server environments, and automate tasks using PowerShell and Python.
We are seeking a Pleno professional to manage, support, troubleshoot, and automate middleware environments, web servers, and application servers.
As a Video Game LQA Tester, you will ensure localized games provide a polished experience by reviewing content for accuracy and tracking issues throughout the testing lifecycle.
As a Video Game LQA Tester, you will ensure localized games provide a polished experience by reviewing content for linguistic accuracy and documenting issues throughout the testing lifecycle.
