JAMF Administration /L3 Engineer

Role: JAMF Administration & Engineering // USA Remote

Location: Draper, UT /Remote

Job Description:

Job Title: JAMF L3 Engineer

Experience – 5 -10 Years

Education

• Bachelor’s degree in computer science, Information Technology, Engineering, or a related discipline.

• Candidates should have a minimum of 5 years of relevant IT experience.

Job Summary

We are seeking a highly skilled JAMF L3 Engineer to manage, support, and optimize enterprise Apple device management environments. The ideal candidate will possess strong expertise in JAMF Pro, macOS administration, endpoint security, automation, and enterprise mobility management (EMM/UEM) solutions. The role requires advanced troubleshooting capabilities, architecture knowledge, and experience supporting large-scale Apple deployments.

Key Responsibilities

JAMF Administration & Engineering

• Design, implement, and maintain JAMF Pro infrastructure.

• Configure and manage macOS, iOS, and iPadOS devices using JAMF Pro.

• Create and maintain configuration profiles, policies, smart groups, and automated workflows.

• Manage Apple Business Manager (ABM) integration and Automated Device Enrollment (ADE).

Endpoint Management

• Manage software deployment, patch management, OS upgrades, and security updates.

• Support device lifecycle management including provisioning, enrollment, compliance, and decommissioning.

• Implement and maintain Zero-Touch deployment processes.

Technical Support & Troubleshooting

• Act as Level 3 escalation point for JAMF and macOS-related incidents.

• Perform root cause analysis (RCA) and implement permanent fixes.

• Troubleshoot complex issues involving:

o JAMF Pro

o macOS

o Apple Business Manager

o Authentication and SSO

o Certificates

o Endpoint security tools

Security & Compliance

• Implement security baselines and compliance policies.

• Ensure device compliance with organizational and regulatory requirements.

• Integrate JAMF with security solutions such as:

o Microsoft Intune

o Microsoft Defender

o CrowdStrike

o Okta

o Azure AD / Entra ID

Automation & Scripting

• Develop automation solutions using:

o Bash

o Shell Scripting

o Python

o AppleScript

• Automate deployment, compliance checks, and reporting activities.

Documentation & Governance

• Create and maintain SOPs, runbooks, technical documentation, and knowledge articles.

• Participate in change management, problem management, and release activities.

• Provide technical guidance and mentoring to L1/L2 support teams.

Mandatory Skills

• 5-10 years of IT Infrastructure/Endpoint Management experience.

• 3 years of hands-on JAMF Pro administration experience.

• Strong macOS administration and troubleshooting experience.

• Experience with Apple Business Manager (ABM).

• Experience with JAMF Pro deployment and integration.

• Knowledge of enterprise endpoint management and device security.

• Experience in software packaging and patch management.

• Strong scripting skills (Bash/Shell/Python).

• Experience with Active Directory, Azure AD/Entra ID, LDAP, and SSO.

• Knowledge of ITIL processes (Incident, Change, Problem Management).

Preferred Skills

• Experience with Microsoft Intune and co-management.

• Knowledge of Okta, Microsoft Defender, CrowdStrike, or related security platforms.

• Experience in cloud technologies and MDM/UEM ecosystems.

• Understanding compliance frameworks such as SOC, ISO 27001, HIPAA, or PCI-DSS.

Certifications (Preferred)

• JAMF 200/300/400 Certification.

• Apple Device Support Certification.

• Apple Deployment and Management Certification.

• ITIL Foundation Certification.

• Microsoft Endpoint Administrator Certification.

Soft Skills

• Strong analytical and troubleshooting skills.

• Excellent written and verbal communication.

• Ability to work independently in a 24x7 enterprise support environment.

• Strong stakeholder management and customer-facing skills.

• Ability to lead technical discussions and provide architectural recommendations

JAMF L3 Engineer

Key Technical Skills & Competencies

JAMF Pro & Apple MDM

• JAMF Pro Administration

• JAMF 100 / 200 / 300 Certified

• JAMF Cloud / Enterprise JAMF Management

• Smart Groups, Static Groups, Policies, Configuration Profiles

• PreStage Enrollment and Zero-Touch Deployment

• JAMF Blueprints and Declarative Device Management

• Self Service Catalog Management

• Extension Attributes Apple Business Manager & Apple Ecosystem

• Apple Business Manager (ABM)

• Automated Device Enrollment (ADE/DEP)

• Apps and Books / VPP Management

• macOS, iOS and iPadOS Device Management

• Apple Silicon Device Support

• MacBook and iMac Lifecycle Management

• Mac Server Administration

• Apple Onboarding and Enrollment Workflows

macOS Administration & Security

• Advanced macOS Troubleshooting

• FileVault Encryption

• Gatekeeper and System Integrity Protection

• Certificates and Keychain Management

• macOS Security Baselines

• CIS Level 1 Benchmark Implementation

• JAMF Compliance Editor

• JAMF Compliance Reporter / Compliance Manager Patch Management & Application Deployment

• macOS OS Update Management

• Third-Party Application Patching

• Installomator

• Nudge

• S.U.P.E.R.M.A.N. Script

• PKG / DMG Packaging and Deployment

• Application Lifecycle Management

• Vulnerability Remediation and Patch Compliance

Microsoft Endpoint & Cloud Integration

• Microsoft Intune / Endpoint Manager

• JAMF and Intune Integration

• Company Portal Integration

• Microsoft Entra ID / Azure AD

• Conditional Access and Device Compliance

• Microsoft 365 Administration

• Exchange Online, SharePoint Online, OneDrive

• Azure / Cloud Administration Automation, Scripting & Reporting

• Bash / Shell Scripting

• Python Scripting

• JAMF API and REST API Integrations

• Automated Remediation Workflows

• Power BI Dashboards

• JAMF API Reporting

• Asset, Patch and Compliance Reporting

• ServiceNow and ConnectWise Ticketing

Endpoint Security & Infrastructure

• Endpoint Security Tool Integration

• Firewall and VPN Setup

• Active Directory Administration

• Networking: TCP/IP, DNS, DHCP, NAT and VPN

• Windows Server Administration

• Synology NAS Administration

• Cloud Backup and Data Protection

• Google Workspace Administration Leadership & Service Delivery

• L3 Escalation Support

• Root Cause Analysis

• Incident, Problem and Change Management

• SLA Management

• Project Coordination

• Cloud Migration Experience

• Mentoring L1/L2 Engineers

• Stakeholder and Client Management