Systems Engineer / Jamf Pro Senior

Location: Bethesda (2 Days Onsite / 3 Days Remote ) - May increase as Client needs change

Position Title: Systems Engineer / Jamf Pro Senior

Clearance: Public Trust

Job Summary

We are seeking a Systems Engineer / Jamf Pro Senior for our client at the NIH. This role serves as the technical lead for Apple/macOS endpoint management using Jamf Pro, supporting a mixed enterprise environment of approximately 450+ endpoints (Windows/macOS/Linux) including about 100+ Macs primarily located across NIH campus facilities.

The Systems Engineer / Jamf Pro Senior will own the engineering and operational management of the macOS fleet-including imaging/provisioning, configuration management, patching, software packaging, and self-service enablement-while ensuring alignment with Client security policies, lifecycle standards, and service delivery expectations. The position works closely with the Service Desk, Security, and Server teams and partners with NIH enterprise IT organizations to maintain secure, reliable, and highly available IT services for a scientific and administrative customer base.

Key Responsibilities

Jamf Pro Administration & Apple Endpoint Management (Senior)

• Serve as the primary administrator and technical lead for Jamf Pro.
• Create and maintain software packages for deployment (PKG workflows, testing, version control, and rollout planning).
• Develop scripts (e.g., Bash/Python) to automate deployments, configuration, remediation, and reporting.
• Create and manage configuration profiles to deploy settings, restrictions, and compliance baselines.
• Lead patch management for macOS applications and operating systems; coordinate update waves and validate compliance.
• Manage device enrollment, imaging, and provisioning tasks (including templates/workflows for mass deployments).
• Administer Jamf Self Service (catalog design, user experience, scoped software availability, and adoption).
• Manage and maintain Apple Business Manager (device assignments, enrollment workflows, and integration support).
• Test newly released macOS versions and key software; validate compatibility, develop deployment plans, and prepare for enterprise-wide rollout.
• Support API integrations, including integration with LAPS (as applicable to the environment).

macOS Standardization, Imaging & Base Build Ownership

• Own macOS base image standards, including:
  
  
  
  • base build configuration
  • packages for deployment
  • provisioning templates for imaging and onboarding
  
  
  
  

• Maintain readiness of Mac loaner laptops (patched, current configuration, deployable on demand).
• Support annual refresh and rollout activities, contributing to delivery of 100-200 endpoints annually across the enterprise (Windows and Mac; Mac led via Jamf).

Security, Vulnerability Remediation & Lifecycle Compliance

• Remediate vulnerabilities on macOS endpoints within NIH-mandated timelines in coordination with the ISSO and IT leadership.
• Proactively track and mitigate end-of-life (EOL) operating systems/applications; plan upgrades/migrations ahead of EOL dates and escalate waiver needs when unavoidable.
• Support endpoint hardening practices and ensure configurations align with security requirements and least-privilege access.

Identity, Access & Enterprise Systems Support

• Manage and maintain Client Service Accounts as assigned (documentation, access controls, credential hygiene, and operational continuity).
• Perform Active Directory administration tasks relevant to endpoint operations and user access support.
• Support enterprise tooling and user productivity ecosystems, including integration touchpoints with:

• Microsoft Office 365
• NIH enterprise services and authentication workflows (as applicable)

Licensing & Application Ecosystem Support

• Support Adobe license management and related endpoint deployment/licensing workflows.
• Maintain application currency through structured testing, packaging, and phased deployments.

ServiceNow / Operational Support & Documentation

• Work within NIH ServiceNow for ticket queue management, escalations, customer communications, and documentation of all work performed.
• Provide expert escalation support and mentoring to junior technicians; contribute to reducing repeat incidents through SOPs and automation.
• Create and maintain Standard Operating Procedures (SOPs) for complex or recurring macOS issues and deployment processes.

Requirements

Education: High School Diploma required; Bachelor's degree in IT, Computer Science, Engineering, or related field preferred (or equivalent experience).

Experience

• 10+ years of professional experience providing end user IT support in an enterprise environment.
• 7+ years of experience administering Jamf MDM/Jamf Pro solutions at scale.
• Demonstrated experience supporting enterprise endpoint environments with strong operational rigor (imaging, patching, lifecycle, documentation).

Technical Skills (Required)

• Jamf Pro administration (scoping, policies, profiles, packages, smart/static groups, Self Service)
• Patch management (OS and application patching strategy, testing, rollout, compliance tracking)
• macOS imaging/provisioning and troubleshooting (enterprise patterns)
• PC and Mac imaging & troubleshooting in a mixed environment
• Software/systems maintenance, upgrades, and lifecycle management
• Enterprise IT infrastructure support fundamentals (identity, access, endpoint compliance, remote support tooling)
• Scripting/automation for endpoint operations (e.g., Bash/Zsh/Python)
• Strong troubleshooting and root-cause analysis skills; ability to resolve complex issues independently
• Ability to operate with a customer-centric mindset and maintain high customer satisfaction
• Strong collaboration and knowledge-sharing skills in a multi-team environment

Preferred Requirements

• ServiceNow ticket queuing and management experience
• iPhone enterprise administration and support
• Microsoft Office 365 end user support

Certifications - Required

• Jamf Certified Tech (Jamf 200)
• Jamf Certified Admin (Jamf 300)
• ITIL v4 Foundation

Compensation and Benefits

The projected compensation range for this position is $100,000 to $130,000 per year benchmarked in the Washington, D.C. metropolitan area. The salary range provided is a good faith estimate representative of all experience levels. Salary at LCG is determined by various factors, including but not limited to role, location, the combination of education/training, knowledge, skills, competencies, certifications, and work experience.

LCG offers a competitive, comprehensive benefits package which includes health insurance options (medical, dental, vision), life and disability insurance, retirement plan contributions, as well as paid leave, federal holidays, professional development, and lifestyle benefits.

Devoted to Fair and Inclusive Practices

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

If you are interested in applying for employment with LCG and need special assistance or an accommodation to apply for a posted position, contact our Human Resources department by email at hr@lcginc.com.

Securing Your Data

Beware of fraudulent job offers using LCG's name. LCG will never request payment-related details or advancement of money during the application process. Legitimate communication will only come from lcginc.com or system@hirebridgemail.com emails, not free commercial services like Gmail or WhatsApp. If you receive suspicious emails asking for payment or personal information, contact us immediately at hr@lcginc.com.

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.