Apple Device Management Specialist

RESPONSIBILITIES:
Kforce has a client that is seeking an Apple Device Management Specialist in Topeka, KS.

Summary:
We are seeking an experienced Apple Device Management Specialist to provide short-term expert-level support for a client's Apple endpoint environment. This is a hands-on specialist engagement for a local candidate who will serve as the subject-matter expert for all Apple ecosystem endpoints - macOS laptops and iPads - within a predominantly Microsoft-centric enterprise infrastructure. The role will support day-to-day Apple device operations, drive a Jamf-to-Intune configuration management migration, and ensure macOS and iOS devices are fully integrated, secure, and compliant within our Microsoft-first environment.

Responsibilities:
* Serve as the expert-level subject-matter expert for macOS and Apple device management, owning strategy, design, and execution for all Apple endpoints including MacBooks and iPads
* Administer and optimize Jamf Pro for Apple device lifecycle management, including provisioning, policy enforcement, patching, compliance reporting, and ongoing optimization
* Lead and execute the migration of macOS configuration management from Jamf to Microsoft Intune, including planning, testing, phased rollout, and documentation
* Configure and maintain Microsoft Intune for macOS and iOS/iPadOS device management, including device enrollment, configuration profiles, compliance policies, and application deployment
* Design and implement macOS and iOS solutions fully integrated into the Microsoft enterprise environment, including Entra ID (Azure AD), Intune, Microsoft 365, Conditional Access policies, and identity integration
* Troubleshoot and resolve complex cross-platform issues spanning macOS, iOS, and the Microsoft stack across identity, access, networking, and device management layers
* Configure and support Platform SSO for macOS, ensuring seamless Entra ID-based authentication for Apple devices within the hybrid identity environment

REQUIREMENTS:
* Associate's or Bachelor's degree in Computer Science, Information Technology, a related field, or equivalent demonstrated capability
* 7-10+ years of endpoint engineering experience, with deep expert-level hands-on experience managing macOS in large-scale enterprise environments
* Advanced hands-on experience with Jamf Pro administration, including policies, configuration profiles, compliance, reporting, and automation
* Demonstrated experience planning and executing MDM migrations, including Jamf-to-Intune or hybrid Jamf + Intune environments
* Strong hands-on experience with Microsoft Intune for macOS and iOS/iPadOS device management, including enrollment, compliance policies, configuration profiles, and app deployment
* Experience integrating Apple devices into Microsoft-centric environments including Entra ID (Azure AD), Conditional Access, and Microsoft 365
* Experience with Platform SSO and macOS Entra ID authentication in hybrid identity environments
* Working knowledge of certificate management, PKI, and their application in Apple device identity and security
* Working knowledge of iOS/iPadOS device management (iPad and iPhone), including MDM enrollment, configuration profiles, and app management
* Solid understanding of endpoint security practices including FileVault encryption, endpoint protection, and compliance frameworks
* Familiarity with Apple Business Manager (ABM) and zero-touch deployment workflows
* Expert-level macOS administration, including macOS architecture, security model, system administration, and troubleshooting
* Strong scripting and automation skills in Bash, Python, and/or PowerShell
* Strong communication skills with the ability to work effectively across technical teams and communicate clearly with non-technical stakeholders
* Jamf certifications (Jamf 200, 300, or 400) are strongly preferred
* Experience in the financial services industry or another regulated environment is preferred

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.