Evolution Cloud Services (EVOCS)
Lead macOS Intune MDM/MAM Engineer
Denver, CO
Sponsorship not specified$80k-$85kDetected 8 days ago
PythonBashPowerShelliOSAzureCybersecurityMicrosoft SentinelMicrosoft DefenderIncident ResponseZero Trust
About the role
- EVOCS's journey began with a mission to empower businesses with advisory expertise, empowered with idealtechnologies to provide them with comprehensive solutions to grow and prosper.
- Our roots in employee-managed operations reflect our commitment to quality, consistency, and client success.
- If you enjoy working in a hyper-fast-growing company, are eager to be part of an agile team, and want to be part of our success story, then let's talk!
Responsibilities
- Architect, deploy, and manage the lifecycle of macOS devices using Microsoft Intune MDM
- Design and tune configuration profiles, compliance policies, and security rules that keep Mac devices secure, performant, and user-friendly
- Own the integration between Microsoft Intune and Apple Business Manager (ABM)
- Manage app deployment and updates (App Store, VPP, and enterprise apps) through Intune
- Implement Microsoft Entra ID Platform SSO on macOS using the Enterprise SSO plug-in
- Enable Secure Enclave-based authentication (hardware-backed keys, Touch ID) to deliver a Windows Hello-equivalent experience on Mac
- Manage FileVault full-disk encryption via Intune, including key escrow and recovery workflows
- Design policies that apply MAM app protection and Conditional Access to personal Macs without intruding on personal data
- We are privileged to serve our loyal customer base in our mission to build lasting relationships with our clients based on trust and mutual success.
- We strive to deliver exceptional quality and consistency through a white-glove approach.
Requirements
- 5+ years managing and securing macOS devices in an enterprise environment
- 3+ years hands-on with Microsoft Intune (Endpoint Manager) - deploying and managing macOS at scale
- Proven experience with Apple Business Manager (ABM) and Automated Device Enrollment (ADE)
- Deep knowledge of FileVault encryption management via Intune - policy creation, key escrow, and recovery
- Experience configuring Microsoft Entra ID Platform SSO and SSO extensions on macOS
- Familiarity with Conditional Access policies that tie device compliance to identity access
- Proficiency in scripting - Bash/zsh, PowerShell, and/or Python - for automation and Microsoft Graph API integrations
- Experience with Microsoft Defender for Endpoint on macOS
Nice to have
- smart lockout, risk-based sign-in, MFA
- Ideally you have…
Compensation
- Pay Range for jobs in the US.
Company info
- Founded by a team of passionate experts, EVOCS has grown into a trusted partner to a growing number of leaders across their respective industries.
Apply directly at Evolution Cloud Services (EVOCS) →Create a free account for alerts like thisView Evolution Cloud Services (EVOCS) immigration profile
This listing is sourced directly from Evolution Cloud Services (EVOCS)'s careers page and normalized into a canonical job model.