Job Description
Position Summary

DPR is seeking a highly skilled and forward-thinking Lead Endpoint Engineer - Apple Platform & Modern Device Management to establish, secure, and scale the enterprise Apple ecosystem across the organization.

This role serves as the technical owner of DPR's Apple platform strategy and is responsible for the architecture, deployment, security, compliance, lifecycle management, and ongoing evolution of macOS devices within a Microsoft-centric environment. The ideal candidate will combine deep Apple expertise with strong knowledge of Microsoft technologies, ensuring Apple devices are seamlessly integrated with Microsoft Intune, Entra ID, Defender for Endpoint, Conditional Access, and other enterprise services.

This is a hands-on engineering role that combines strategy, architecture, and execution. The successful candidate will define enterprise standards, implement automation, improve user experience, and continuously evaluate emerging technologies, including Intune, Jamf and other Apple management solutions, to ensure DPR maintains a secure, scalable, and modern endpoint management platform.

This role plays a critical part in enabling workforce productivity while maintaining enterprise-grade security, compliance, and operational excellence.
Key Responsibilities
Apple Platform Strategy & Architecture

• Serve as the technical owner for DPR's Apple ecosystem and endpoint strategy.
• Define and maintain enterprise standards for macOS devices.
• Develop and maintain the Apple platform roadmap.
• Evaluate and recommend endpoint management architectures, including Intune, Jamf, and emerging Apple management technologies.
• Provide technical leadership on Apple platform adoption and modernization initiatives.
• Ensure Apple platform capabilities align with DPR's security, compliance, and operational objectives.

Endpoint Management & Lifecycle Operations

• Administer and optimize Apple Business Manager (ABM).
• Design and maintain zero-touch deployment processes.
• Manage device enrollment, provisioning, configuration, and retirement processes.
• Develop and maintain macOS configuration profiles and compliance policies.
• Implement and maintain software deployment and patch management solutions.

Microsoft Integration & Identity Services

• Integrate Apple devices with Microsoft Intune and Microsoft Entra ID.
• Implement and maintain Platform SSO and modern authentication solutions.
• Support Conditional Access and device compliance policies.
• Collaborate with Identity & Access Management teams to strengthen device trust and security posture.
• Support certificate-based authentication and password less initiatives.

Endpoint Security & Compliance

• Develop and maintain macOS security baselines.
• Implement and manage File Vault encryption standards.
• Deploy and optimize Microsoft Defender for Endpoint.
• Ensure compliance with corporate security policies and regulatory requirements.
• Monitor endpoint compliance and remediation activities.
• Align Apple security standards with NIST, CIS Benchmarks, and DPR security requirements.
• Participate in security reviews, audits, and compliance assessments.

Automation & Engineering

• Develop automation to streamline deployment, compliance, reporting, and lifecycle management processes.
• Leverage scripting and APIs to improve operational efficiency.
• Reduce manual provisioning and support activities through automation.
• Develop monitoring and reporting solutions for Apple endpoint health and compliance.

User Experience & Service Improvement

• Improve the end-user Apple experience through standardization and automation.
• Partner with Service Desk and Endpoint Engineering teams to reduce support complexity.
• Evaluate emerging Apple technologies and features that improve productivity and security.
• Act as a senior escalation point for complex Apple-related technical issues.

Governance & Platform Optimization

• Establish and maintain Apple platform standards, procedures, and documentation.
• Develop operational metrics and dashboards related to enrollment, compliance, security, and lifecycle management.
• Conduct regular reviews of platform effectiveness and identify improvement opportunities.
• Continuously assess whether current management platforms adequately support DPR's Apple environment and recommend enhancements where appropriate.

Skills & Competencies
Technical & Professional Skills

• Deep expertise in enterprise macOS administration and architecture.
• Strong experience with Microsoft Intune and endpoint management.
• Strong understanding of Microsoft Entra ID, Conditional Access, and device compliance.
• Experience with Apple Business Manager and Apple enrollment technologies.
• Knowledge of Platform SSO and Apple identity integration.
• Experience implementing endpoint security controls and compliance programs.
• Familiarity with Jamf Pro or other Apple-focused management platforms.
• Experience with endpoint automation, scripting, and API integrations.

Security & Compliance

• Strong understanding of endpoint security principles and modern device management.
• Experience implementing FileVault, EDR/XDR solutions, and security baselines.
• Familiarity with NIST Cybersecurity Framework, CIS Benchmarks, and enterprise security practices.
• Experience supporting audit and compliance activities.

Leadership & Collaboration

• Ability to influence technical direction and platform strategy without direct authority.
• Strong stakeholder engagement skills across Security, Infrastructure, Identity, Procurement, and End User Services.
• Ability to translate technical concepts into business value and operational outcomes.
• Strong documentation and communication skills.

Analytical & Problem-Solving Skills

• Strong troubleshooting and root-cause analysis capabilities.
• Ability to assess technology gaps and recommend scalable solutions.
• Data-driven decision-making and continuous improvement mindset.

Qualifications
Required

• Bachelor's degree in Information Technology, Computer Science, Information Systems, or related field, or equivalent experience.
• 5+ years of endpoint engineering experience.
• 3+ years of enterprise macOS administration experience.
• Strong experience with Microsoft Intune and Microsoft Entra ID.
• Experience with Apple Business Manager.
• Experience supporting enterprise endpoint security controls.
• Experience designing and implementing endpoint standards and lifecycle processes.

Preferred

• Experience administering Jamf Pro.
• Apple Device Support or Apple Deployment & Management certifications.
• Microsoft Intune Administrator certification.
• Microsoft Security Administrator certification.
• Experience operating Apple environments at enterprise scale.
• Experience with automation and scripting (Bash, Python, PowerShell, APIs).

Reporting & Structure

• Reports to: Manager, Endpoint Engineering (or equivalent).
• Partners with: Cybersecurity, Identity & Access Management, Infrastructure, Service Desk, Procurement, Enterprise Architecture, and Collaboration Services.
• Serves as the technical owner of DPR's Apple platform and endpoint management strategy.
• Functions as a senior technical lead and subject matter expert for Apple technologies across the enterprise.