Apple/macOS SME

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com

DMI is seeking an Apple/macOS SME to serve as the subject matter expert for macOS endpoint engineering at a federal agency client. In this role, you will design, implement, and maintain secure macOS workstation images and enterprise device management configurations, ensuring all Apple endpoints meet federal security standards and organizational compliance requirements.

• →Design and maintain secure macOS workstation images incorporating approved security baselines, authentication agents, logging, and VDI/remote access capabilities
• →Deploy and manage Apple Business Manager and JAMF Pro for macOS device enrollment, configuration profiles, and compliance enforcement
• →Implement and maintain OS and application patching for macOS endpoints; validate patches post-deployment and support rollback
• →Configure passwordless authentication and hardware-backed credentials for macOS devices; manage FileVault recovery key escrow and custody records
• →Maintain device enrollment workflows and accurate asset inventory for macOS endpoints, including provisioning, reassignment, decommissioning, and secure wipe
• →Ensure macOS Unified Log telemetry is properly configured and forwarded to enterprise SIEM and EDR platforms
• →Produce and maintain engineering documentation, runbooks, and change records for all macOS endpoint configurations

Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. US citizenship may be required for some positions.

• Bachelor's degree in Information Technology, Cybersecurity, or a related field preferred 
• Formal education requirements may be waived based on relevant professional experience, as determined by the government
• 8+ years of experience in Information Technology, Endpoint Engineering, or Cybersecurity 
• 6+ years performing engineering (not help desk) functions in enterprise environments 
• Expert-level proficiency with JAMF Pro for macOS endpoint management and compliance enforcement 
• Experience with Apple Business Manager for macOS and iOS device enrollment and provisioning 
• Experience building/maintaining macOS workstation images, including automation, validation, and rollback 
• Experience configuring macOS Unified Logs and forwarding telemetry to enterprise SIEM and EDR platforms
• Experience working under formal change control, audit, and security governance processes 

• Apple Certified Support Professional (ACSP) or equivalent certification
• Experience managing macOS endpoints in a federal or highly regulated environment
• Familiarity with Gatekeeper and macOS security hardening frameworks