Senior macOS Endpoint Engineer
- AI
- MacOS
- Mac
- Jamf
- Microsoft Intune
- Azure AD
- Kerberos
- Bash
- Python
- PowerShell
- DNS
- ServiceNow
- Jira
- Intune
- Bash scripting
At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.
Â
Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.
Â
This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
Â
We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.
Â
What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.
Â
If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.
macOS Device Management
- Manage enterprise Mac fleets using MDM solutions such as: Kandji, Jamf Pro, Microsoft Intune, and Workspace ONE
- Configure and maintain enrollment programs : Â Apple Business Manager (ABM) and Automated Device Enrollment (ADE)
- Create and manage configuration profiles, restrictions, compliance policies, and security baselines.
Application Deployment & Packaging
- Package and Deploy PKG, DMG, and ZIP-based applications on macOS.
- Manage application updates and version control.
- Troubleshoot application installation and compatibility issues.
Security & Compliance
- Implement security policies and compliance standards.
- Manage:
- FileVault encryption
- Privacy Preferences Policy Control (PPPC)
- System and Kernel Extensions
- Certificates and keys
Identity & Access Management
- Integrate and support: Microsoft Entra ID (Azure AD), AD, Kerberos SSO and Platform SSO
- Manage user authentication and device trust policies.
Automation & Scripting
- Develop and maintain automation scripts using: Bash, Shell Scripting, Python and PowerShell (nice to have)
- Automate software deployment, compliance checks, reporting, and remediation tasks.
OS Upgrades & Patch Management
- Plan and execute macOS upgrades.
- Manage operating system patching and application updates.
- Monitor update compliance and remediation activities.
Troubleshooting & Support
- Serve as Level 3 escalation point for macOS-related issues.
- Troubleshoot:
- Login and authentication issues
- MDM enrollment failures
- Application deployment problems
- Network connectivity issues
- Compliance and certificate-related incidents
- Analyze logs and perform root cause analysis.
Technical Skills
- Expert-level knowledge of macOS administration.
- Strong understanding of: Apple Business Manager, Device Enrollment, Configuration Profiles, FileVault, Certificates and Keychain Management
- Strong scripting experience using Bash and Shell scripting.
- Experience managing software packaging and deployment.
- Familiarity with enterprise networking concepts: DNS, VPN, Wi-Fi Profiles and Proxy Configuration
Troubleshooting Expertise
- System Logs, Unified Logs, Console Logs, Endpoint Security Logs and Application Crash AnalysisÂ
Preferred Qualifications
- Experience with Kandji MDM or Equal Mac MDM administration.
- Experience supporting large-scale macOS environments (500+ devices).
- Exposure to ServiceNow, Jira, or similar ITSM tools.
Soft Skills
- Excellent communication and Strong analytical and troubleshooting abilities.
- Strong documentation and process improvement mindset.
Ideal Candidate Profile
The ideal candidate will have5–6 years of enterprise macOS administration experience, strong expertise inKandji/Jamf/Intune, solidBash scripting and automation skills, deep understanding ofApple security and device management, and the ability to independently manage and troubleshoot large-scale Mac environments.
Senior macOS Endpoint Engineer · Check Point Software Technologies