ShiftCode Analytics, Inc. · 1 day ago
Mac Endpoint Engineer - Grant Thornton
Downers Grove, IL
Full-time
Onsite
Mid, Senior Level
3+ years expShiftCode Analytics, Inc. is seeking a Mac Endpoint Engineer to elevate macOS to first-class status within the organization. The role involves building and hardening a modern Intune-managed macOS environment, focusing on zero-touch enrollment, app packaging, and compliance automation.
AnalyticsConsultingInformation Technology
No H1B
Responsibilities
Design/operate zero-touch enrollment with ABM + ADE (PreStage through post-enrollment fixes)
Build consistent first sign-in experience using PSSO + Intune
Improve enrollment flows, bootstrap content, and post-enrollment automations
Lead macOS app packaging for Intune (PKG/DMG + pre/post scripts, detection rules, dependencies, retries, uninstall logic)
Create scalable third-party app deployment model with staged rings, rollback plans, change control
Collaborate with Packaging/QA on versioning, testing, release notes
Manage Intune baseline configs & compliance policies; suggest UX/reliability improvements
Enforce CIS macOS benchmark controls (macOS 26+); own configuration/enforcement, partner with InfoSec
Integrate/support: Entra ID, Defender for Endpoint (DLP), CrowdStrike, CyberArk EPM, Qualys, GlobalProtect ZTNA
Automate via scripting (bash/zsh/Python; PowerShell for Graph) – provisioning, remediations, health checks, reporting
Deliver actionable Intune dashboard metrics (enrollment success, sign-in time, compliance drift, packaging SLAs)
Write KB articles/how-tos; transfer knowledge to Support; provide occasional Tier 3 guidance (no on-call)
Partner with Identity, Security, Networking, Support to prepare for go-live and scale across US users
Contribute to standards, guardrails, SOPs for long-term stability
Qualification
Required
3–5+ years enterprise macOS MDM (Intune preferred)
Strong Intune macOS packaging expertise (PKG/DMG, scripts, detection, rings, rollback)
Hands-on ADE zero-touch + PSSO implementation
Scripting: bash/zsh/Python (PowerShell/Graph as needed)
Experience enforcing CIS controls via Intune profiles/policies
Familiarity with Defender, CrowdStrike, CyberArk EPM, Qualys, GlobalProtect
Excellent documentation & knowledge-transfer skills
Preferred
Self-healing remediations / drift correction
iOS/iPadOS in Intune (bonus)
Entra ID Conditional Access for macOS
Current Apple management trends (PSSO, macOS security/privacy)
Company
ShiftCode Analytics, Inc.
ShiftCode Analytics Inc is a Tampa, FL based firm formed with one sole purpose of delivering best and quick services to its clients nationwide.
51-200 employees
Funding
Current Stage
Growth StageCompany data provided by crunchbase