Mac Endpoint Engineer :: (macOS + Intune) ::: Downers Grove, IL :: Onsite

Position: Mac Endpoint Engineer (macOS + Intune)
Duration: 6-12+ Month Contract 
Location: Onsite at the Downers Grove, IL

(office/ Onsite)

Description:
We are elevating macOS to first-class status and need a hands-on Mac Endpoint Engineer to build and harden a modern Intune-managed macOS environment. 
You will deliver zero-touch enrollment, seamless Platform SSO (PSSO) first sign-in, large-scale macOS app packaging, configuration, compliance, automation, and strong security posture. 

Goal: achieve 1:1 parity with Windows devices

Key Responsibilities

• Design/operate zero-touch enrollment with ABM + ADE (PreStage through post-enrollment fixes).
• Build consistent first sign-in experience using PSSO + Intune.
• Improve enrollment flows, bootstrap content, and post-enrollment automations.
• Lead macOS app packaging for Intune (PKG/DMG + pre/post scripts, detection rules, dependencies, retries, uninstall logic).
• Create scalable third-party app deployment model with staged rings, rollback plans, change control.
• Collaborate with Packaging/QA on versioning, testing, release notes.

Required Qualifications:

• 3 5+ years enterprise macOS MDM (Intune preferred).
• Strong Intune macOS packaging expertise (PKG/DMG, scripts, detection, rings, rollback).
• Hands-on ADE zero-touch + PSSO implementation.
• Scripting: bash/zsh/Python (PowerShell/Graph as needed).
• Experience enforcing CIS controls via Intune profiles/policies.
• Familiarity with Defender, CrowdStrike, CyberArk EPM, Qualys, GlobalProtect.
• Excellent documentation & knowledge-transfer skills.