Sr macOS Endpoint Engineer

Why Join Us

At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.

Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.

This is where innovation meets real-world impact. You ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.

We re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.

What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.

If you re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.

Key Responsibilities

macOS Device Management

• Manage enterprise Mac fleets using MDM solutions such as: Kandji, Jamf Pro, Microsoft Intune, and Workspace ONE
• Configure and maintain enrollment programs : Apple Business Manager (ABM) and Automated Device Enrollment (ADE)
• Create and manage configuration profiles, restrictions, compliance policies, and security baselines.

Application Deployment & Packaging

• Package and Deploy PKG, DMG, and ZIP-based applications on macOS.
• Manage application updates and version control.
• Troubleshoot application installation and compatibility issues.

Security & Compliance

• Implement security policies and compliance standards.
• Manage:
  • FileVault encryption
  • Privacy Preferences Policy Control (PPPC)
  • System and Kernel Extensions
  • Certificates and keys

Identity & Access Management

• Integrate and support: Microsoft Entra ID (Azure AD), AD, Kerberos SSO and Platform SSO
• Manage user authentication and device trust policies.

Automation & Scripting

• Develop and maintain automation scripts using: Bash, Shell Scripting, Python and PowerShell (nice to have)
• Automate software deployment, compliance checks, reporting, and remediation tasks.

OS Upgrades & Patch Management

• Plan and execute macOS upgrades.
• Manage operating system patching and application updates.
• Monitor update compliance and remediation activities.

Troubleshooting & Support

• Serve as Level 3 escalation point for macOS-related issues.
• Troubleshoot:
  • Login and authentication issues
  • MDM enrollment failures
  • Application deployment problems
  • Network connectivity issues
  • Compliance and certificate-related incidents
• Analyze logs and perform root cause analysis.

Qualifications

Technical Skills

• Expert-level knowledge of macOS administration.
• Strong understanding of: Apple Business Manager, Device Enrollment, Configuration Profiles, FileVault, Certificates and Keychain Management
• Strong scripting experience using Bash and Shell scripting.
• Experience managing software packaging and deployment.
• Familiarity with enterprise networking concepts: DNS, VPN, Wi-Fi Profiles and Proxy Configuration

Troubleshooting Expertise

• System Logs, Unified Logs, Console Logs, Endpoint Security Logs and Application Crash Analysis

Preferred Qualifications

• Experience with Kandji MDM or Equal Mac MDM administration.
• Experience supporting large-scale macOS environments (500+ devices).
• Exposure to ServiceNow, Jira, or similar ITSM tools.

Soft Skills

• Excellent communication and Strong analytical and troubleshooting abilities.
• Strong documentation and process improvement mindset.

Ideal Candidate Profile

The ideal candidate will have 5-6 years of enterprise macOS administration experience , strong expertise in Kandji/Jamf/Intune , solid Bash scripting and automation skills , deep understanding of Apple security and device management , and the ability to independently manage and troubleshoot large-scale Mac environments.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.