Apple Client Platform Engineer (Remote)

About the role

Join Alectrona as an Apple Client Platform Engineer and lead professional services engagements for organizations running Apple at scale. You will design, deploy, and hand over Apple management platforms while working fully remotely with a distributed team.

Key responsibilities

• Design, deploy, and transfer Apple MDM, identity, patching, and security solutions, integrating multiple platforms such as Jamf Pro, Intune, Workspace ONE, Fleet, Iru, Addigy, and Mosyle.
• Own end‑to‑end services engagements: scope, plan, execute, document, and close projects while managing your own time and resources.
• Troubleshoot escalated issues using packet captures, log analysis, and protocol‑level MDM debugging.
• Guide customers on best practices, challenge unsuitable plans, and communicate technical decisions in plain language.
• Mentor junior engineers, contribute to new product ideas, and support SMB managed‑services customers.

Required profile

• Mid‑level to senior engineer with deep experience in Apple device management across complex enterprise environments.
• Proven track record delivering paid professional services or consulting engagements.
• Strong ability to lead projects, run scoping calls, and explain technical concepts to non‑technical stakeholders.
• Fluent English and a four‑year degree or equivalent experience.

Required skills

• Expertise with Apple management stack: MDM protocol, Declarative Device Management, Automated Device Enrollment, Apple Business, APNs, configuration profiles, TCC, PPPC, FileVault, code signing, notarization, Platform SSO.
• Hands‑on experience with Jamf Pro, Microsoft Intune, Workspace ONE, Fleet, Iru/Kandji, Addigy, Mosyle.
• Shell scripting (bash), plus familiarity with Swift, Python or Go.
• Version control (git), CI/CD pipelines, API integration, webhooks, automation workflows.
• Networking fundamentals: TCP/IP, DNS, DHCP, routing, 802.1X, VPN, proxies, TLS inspection.
• Identity and access management: Entra ID, Okta, Google Workspace, Active Directory, SAML, OIDC, SCIM, Kerberos.
• Security and compliance frameworks: CIS Benchmarks, NIST 800‑53, SOC 2, ISO 27001, endpoint detection, vulnerability management.