Systems Engineer Jamf Pro Senior

Location: Bethesda (2 Days Onsite / 3 Days Remote ) - May increase as Client needs change

Position Title:Systems Engineer / Jamf Pro Senior

Clearance:Public Trust

Job Summary

We are seeking a Systems Engineer / Jamf Pro Senior for our client at the NIH. This role serves as the technical lead for Apple/macOS endpoint management using Jamf Pro supporting a mixed enterprise environment of approximately 450 endpoints (Windows/macOS/Linux) including about 100 Macs primarily located across NIH campus facilities.

The Systems Engineer / Jamf Pro Senior will own the engineering and operational management of the macOS fleetincluding imaging/provisioning configuration management patching software packaging and self-service enablementwhile ensuring alignment with Client security policies lifecycle standards and service delivery expectations. The position works closely with the Service Desk Security and Server teams and partners with NIH enterprise IT organizations to maintain secure reliable and highly available IT services for a scientific and administrative customer base.

Key Responsibilities

Jamf Pro Administration & Apple Endpoint Management (Senior)

• Serve as the primary administrator and technical lead for Jamf Pro.
• Create and maintain software packages for deployment (PKG workflows testing version control and rollout planning).
• Develop scripts (e.g. Bash/Python) to automate deployments configuration remediation and reporting.
• Create and manage configuration profiles to deploy settings restrictions and compliance baselines.
• Lead patch management for macOS applications and operating systems; coordinate update waves and validate compliance.
• Manage device enrollment imaging and provisioning tasks (including templates/workflows for mass deployments).
• Administer Jamf Self Service (catalog design user experience scoped software availability and adoption).
• Manage and maintain Apple Business Manager (device assignments enrollment workflows and integration support).
• Test newly released macOS versions and key software; validate compatibility develop deployment plans and prepare for enterprise-wide rollout.
• Support API integrations including integration with LAPS (as applicable to the environment).

macOS Standardization Imaging & Base Build Ownership

• Own macOS base image standards including:
  • base build configuration
  • packages for deployment
  • provisioning templates for imaging and onboarding

• Maintain readiness of Mac loaner laptops (patched current configuration deployable on demand).
• Support annual refresh and rollout activities contributing to delivery of 100200 endpoints annually across the enterprise (Windows and Mac; Mac led via Jamf).

Security Vulnerability Remediation & Lifecycle Compliance

• Remediate vulnerabilities on macOS endpoints within NIH-mandated timelines in coordination with the ISSO and IT leadership.
• Proactively track and mitigate end-of-life (EOL) operating systems/applications; plan upgrades/migrations ahead of EOL dates and escalate waiver needs when unavoidable.
• Support endpoint hardening practices and ensure configurations align with security requirements and least-privilege access.

Identity Access & Enterprise Systems Support

• Manage and maintain Client Service Accounts as assigned (documentation access controls credential hygiene and operational continuity).
• Perform Active Directory administration tasks relevant to endpoint operations and user access support.
• Support enterprise tooling and user productivity ecosystems including integration touchpoints with:

• Microsoft Office 365
• NIH enterprise services and authentication workflows (as applicable)

Licensing & Application Ecosystem Support

• Support Adobe license management and related endpoint deployment/licensing workflows.
• Maintain application currency through structured testing packaging and phased deployments.

ServiceNow / Operational Support & Documentation

• Work within NIH ServiceNow for ticket queue management escalations customer communications and documentation of all work performed.
• Provide expert escalation support and mentoring to junior technicians; contribute to reducing repeat incidents through SOPs and automation.
• Create and maintain Standard Operating Procedures (SOPs) for complex or recurring macOS issues and deployment processes.

Requirements

Education:High School Diploma required; Bachelors degree in IT Computer Science Engineering or related field preferred (or equivalent experience).

Experience

• 10 years of professional experience providing end user IT support in an enterprise environment.
• 7 years of experience administering Jamf MDM/Jamf Pro solutions at scale.
• Demonstrated experience supporting enterprise endpoint environments with strong operational rigor (imaging patching lifecycle documentation).

Technical Skills (Required)

• Jamf Pro administration (scoping policies profiles packages smart/static groups Self Service)
• Patch management (OS and application patching strategy testing rollout compliance tracking)
• macOS imaging/provisioning and troubleshooting (enterprise patterns)
• PC and Mac imaging & troubleshooting in a mixed environment
• Software/systems maintenance upgrades and lifecycle management
• Enterprise IT infrastructure support fundamentals (identity access endpoint compliance remote support tooling)
• Scripting/automation for endpoint operations (e.g. Bash/Zsh/Python)
• Strong troubleshooting and root-cause analysis skills; ability to resolve complex issues independently
• Ability to operate with a customer-centric mindset and maintain high customer satisfaction
• Strong collaboration and knowledge-sharing skills in a multi-team environment

Preferred Requirements

• ServiceNow ticket queuing and management experience
• iPhone enterprise administration and support
• Microsoft Office 365 end user support

Certifications - Required

• Jamf Certified Tech (Jamf 200)
• Jamf Certified Admin (Jamf 300)
• ITIL v4 Foundation

Compensation and Benefits

The projected compensation range for this position is $100000 to $130000 per year benchmarked in the Washington D.C. metropolitan area. The salary range provided is a good faith estimate representative of all experience levels. Salary at LCG is determined by various factors including but not limited to role location the combination of education/training knowledge skills competencies certifications and work experience.

LCG offers a competitive comprehensive benefits package which includes health insurance options (medical dental vision) life and disability insurance retirement plan contributions as well as paid leave federal holidays professional development and lifestyle benefits.

Devoted to Fair and Inclusive Practices

All qualified applicants will receive consideration for employment without regard to sex race ethnicity age national origin citizenship religion physical or mental disability medical condition genetic information pregnancy family structure marital status ancestry domestic partner status sexual orientation gender identity or expression veteran or military status or any other basis prohibited by law.

If you are interested in applying for employment with LCG and need special assistance or an accommodation to apply for a posted position contact our Human Resources department by email at.

Securing Your Data

Beware of fraudulent job offers using LCGs name. LCG will never request payment-related details or advancement of money during the application process. Legitimate communication will only come from oremails not free commercial services like Gmail or WhatsApp. If you receive suspicious emails asking for payment or personal information contact us immediately at.

If you believe you are the victim of a scam contact your local law enforcement and report the incident to theU.S. Federal Trade Commission.