System Administrator, macOS

Nakupuna Companies is seeking a System Administrator, macOS. The System Administrator, macOS is responsible for installing, configuring, securing, and supporting enterprise Apple macOS systems and related endpoint management technologies to ensure availability, performance, and security. This role may involve managing GovCloud environments, standalone environments, and systems connected to external networks such as NIPRNET, SIPRNET, DREN, JWICS, and NSA.

The following duties reflect management's definition of essential functions for this job but do not restrict the tasks that might be assigned. Management may assign additional duties and responsibilities at any time due to reasonable accommodation or other reasons.

System Management:

• Install and configure current and legacy macOS systems, including system preferences, permissions, Terminal, bash/zsh, shell scripting, and enterprise endpoint configurations. Ensure configurations comply with C5ISR policies and procedures across DREN, NIPRNET, SIPRNET, JWICS, laboratory networks, and other supported environments.
• Monitor system performance and availability.
• Implement system security measures, review logs, and identify issues.
• Administer Apple Business Manager (ABM), Apple School Manager (ASM), Automated Device Enrollment (ADE), Volume Purchase Program (VPP), and Mobile Device Management (MDM) platforms such as Jamf Pro, Kandji, Mosyle, Microsoft Intune, or Workspace ONE for zero-touch deployment, configuration profiles, policy enforcement, and device management.
• Provide administration, planning, and execution support for Amazon Web Services and Microsoft Azure environments.
• Develop automation using bash, zsh, Python, or AppleScript and support software packaging using .pkg and .dmg installers.
• Maintain system documentation.
• Conduct operating system, application, and security patch management.

Infrastructure Support:

• Configure and maintain storage systems.
• Provision, deploy, inventory, maintain, and decommission Apple devices throughout their lifecycle.
• Configure identity integration with Active Directory, Microsoft Entra ID (Azure AD), Okta, SSO, and Platform SSO.
• Support networking services including DNS, DHCP, VPN, Wi-Fi, and certificate management.
• Coordinate support requests with the Network Enterprise Center (NEC) regarding provisioning, performance, resource allocation, and related requests.
• Ensure managed systems comply with DISA STIGs, SRGs, CIS Benchmarks, NIST guidance, and other cybersecurity requirements while supporting FileVault, Gatekeeper, XProtect, CrowdStrike, SentinelOne, Apple Silicon (M-series), Intel hardware, Apple warranty, and AppleCare processes.
• Coordinate with the DREN Network Operations Center (NOC) and Security, Network, and Identity and Access Management (IAM) teams as required.

Technical Support:

• Provide Tier 2/3 support for macOS hardware, operating systems, enterprise applications, and software conflicts.
• Support ACAS scans, IA vulnerability compliance, endpoint protection, cybersecurity requirements, and remediation activities.
• Apply operating system and security patches to maintain compliance.
• Troubleshoot hardware, software, networking, authentication, certificate, and application issues using root-cause analysis.
• Develop automation workflows, maintain runbooks, SOPs, and knowledge-base documentation, communicate technical issues to non-technical users, and independently prioritize assigned work.

Education and Experience:

• Bachelor’s degree in computer science, IT, or related field
• Required certifications including:
  • Security+ CE or Apple Certified Support Professional (ACSP) or Apple Certified IT Professional (ACITP)
• Other certifications desired but not required, such as:
  • Jamf Certified Technician, Administrator, or Expert
  • CompTIA A+
  • CompTIA Network+
  • SecurityX / CASP+
  • CCNP Security
  • CISA
  • FITSP-O
  • GICSP
  • SSCP
• 3+ years of desktop or endpoint support with macOS administration focus
• Experience with enterprise MDM solutions, Apple Business Manager

Clearance Requirements: Active Secret security clearance required. Must be a U.S. citizen.

Location: Aberdeen Proving Ground, MD

Physical Requirements: The ideal candidate must at a minimum, be able to meet the following physical requirements of the job with or without a reasonable accommodation:

• Ability to perform repetitive motions with the hands, wrists, and fingers.
• Ability to engage in and follow audible communications in emergencies.
• Ability to sit for prolonged periods at a desk and work on a computer.

The Nakupuna Companies use a market-based compensation strategy to ensure that our employees are compensated within applicable market ranges commensurate with multiple factors, including but not limited to the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, organizational requirements, and position location. The projected compensation range for this position is $115,000.00 to $155,000.00 (annualized USD). The salary range displayed represents the typical salary range for this position and is just one component of Nakupuna Companies total compensation package for employees.