Senior macOS Endpoint Engineer

Company Description
At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.
Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.
This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.
What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.
If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.
Job Description
macOS Device Management
Manage enterprise Mac fleets using MDM solutions such as: Kandji, Jamf Pro, Microsoft Intune, and Workspace ONE
Configure and maintain enrollment programs : Apple Business Manager (ABM) and Automated Device Enrollment (ADE)
Create and manage configuration profiles, restrictions, compliance policies, and security baselines.
Application Deployment & Packaging
Package and Deploy PKG, DMG, and ZIP-based applications on macOS.
Manage application updates and version control.
Troubleshoot application installation and compatibility issues.
Security & Compliance
Implement security policies and compliance standards.
Manage:
FileVault encryption
Privacy Preferences Policy Control (PPPC)
System and Kernel Extensions
Certificates and keys
Identity & Access Management
Integrate and support: Microsoft Entra ID (Azure AD), AD, Kerberos SSO and Platform SSO
Manage user authentication and device trust policies.
Automation & Scripting
Develop and maintain automation scripts using: Bash, Shell Scripting, Python and PowerShell (nice to have)
Automate software deployment, compliance checks, reporting, and remediation tasks.
OS Upgrades & Patch Management
Plan and execute macOS upgrades.
Manage operating system patching and application updates.
Monitor update compliance and remediation activities.
Troubleshooting & Support
Serve as Level 3 escalation point for macOS-related issues.
Troubleshoot:
Login and authentication issues
MDM enrollment failures
Application deployment problems
Network connectivity issues
Compliance and certificate-related incidents
Analyze logs and perform root cause analysis.
Qualifications
Technical Skills
Expert-level knowledge of macOS administration.
Strong understanding of: Apple Business Manager, Device Enrollment, Configuration Profiles, FileVault, Certificates and Keychain Management
Strong scripting experience using Bash and Shell scripting.
Experience managing software packaging and deployment.
Familiarity with enterprise networking concepts: DNS, VPN, Wi-Fi Profiles and Proxy Configuration
Troubleshooting Expertise
System Logs, Unified Logs, Console Logs, Endpoint Security Logs and Application Crash Analysis
Preferred Qualifications
Experience with Kandji MDM or Equal Mac MDM administration.
Experience supporting large-scale macOS environments (500+ devices).
Exposure to ServiceNow, Jira, or similar ITSM tools.
Soft Skills
Excellent communication and Strong analytical and troubleshooting abilities.
Strong documentation and process improvement mindset.
Ideal Candidate Profile
The ideal candidate will have 5–6 years of enterprise macOS administration experience, strong expertise in Kandji/Jamf/Intune, solid Bash scripting and automation skills, deep understanding of Apple security and device management, and the ability to independently manage and troubleshoot large-scale Mac environments.

Work arrangement
No