Senior Endpoints Engineer, macOS & JAMF

At Thomson Reuters, our technology drives global markets and helps professionals around the world make decisions that matter. As a leading provider of intelligent information, we are looking for talented professionals who can bring fresh perspectives and innovative solutions that advance our business and support their career growth.We are seeking a highly skilled Senior Endpoints Engineer with deep expertise in macOS enterprise management, JAMF Pro, and JAMF Connect. This role will be responsible for shaping, deploying, operating, and supporting the Mac platform across the organization.

About the Role:

As a Senior Endpoints Engineer, you will play a key role in defining and delivering the technical strategy for Thomson Reuters' macOS endpoint environment. You will work closely with IT, Security, IAM, ServiceNow, and service desk teams to provide a secure, scalable, and user-focused Mac experience.

• Lead the end-to-end design, implementation, administration, and optimization of JAMF Pro and JAMF Connect.
• Drive JAMF initiatives from technical design and pilot phases through global deployment, migration, controlled change, and transition to business-as-usual support.
• Define and implement Mac authentication strategies, including Platform SSO, SSO, MFA, passwordless authentication, and identity integration with Microsoft Entra ID and/or Okta.
• Design and manage macOS enrollment and device lifecycle workflows, including Automated Device Enrollment, re-enrollment, compliance policies, patching, software deployment, and Self Service capabilities.
• Create and maintain JAMF Pro configuration profiles, policies, smart groups, extension attributes, application deployment workflows, and compliance reporting.
• Develop automation, remediation, integration, and reporting solutions using Bash, Python, Swift, and the JAMF Pro API.
• Lead macOS endpoint-hardening efforts, including FileVault, Gatekeeper, CIS Benchmarks, PPPC/TCC permissions, system extensions, kernel extensions, and patch compliance.
• Partner with Information Security and IAM teams to support conditional access, identity integration, endpoint compliance, and security-control implementation.
• Act as the L3 escalation point for complex macOS issues involving endpoint performance, identity, authentication, device compliance, operating system behavior, and JAMF management.
• Produce technical documentation, troubleshooting guides, knowledge articles, and operational runbooks to support consistent service delivery.
• Coach and support L1/L2 engineers and the HCL service desk partner to strengthen macOS support capability and maintain BAU service quality.
• Build and enhance ServiceNow integrations for JAMF Pro, including request fulfillment, incident routing, endpoint workflows, and configuration management.
• Contribute to ServiceNow Now Assist workflows and automation opportunities for macOS support.
• Use Nexthink capabilities, where applicable, to support macOS endpoint analytics, remote actions, proactive remediation, and user-experience improvements.
• Collaborate with Intune and endpoint engineering teams to ensure aligned processes and standards across cross-platform endpoint environments.

About You:

You are an experienced endpoint engineer with strong technical expertise in enterprise macOS management and a proven ability to deliver large-scale JAMF solutions. You are comfortable working across technical teams, translating complex requirements into practical endpoint solutions, and supporting a secure, high-quality user experience.

• Have 6–10 years of endpoint engineering experience, including substantial hands-on experience with JAMF Pro and JAMF Connect.
• Possess advanced knowledge of macOS enterprise management, including MDM enrollment, Automated Device Enrollment, configuration profiles, compliance policies, PPPC/TCC controls, and kernel and system extension policies.
• Have hands-on experience designing and supporting macOS authentication solutions using Platform SSO, SSO, MFA, passwordless authentication, Microsoft Entra ID, and/or Okta.
• Understand identity integration, conditional access, authentication policies, and endpoint compliance requirements in an enterprise environment.
• Bring strong L3 troubleshooting expertise for complex macOS issues related to performance, identity, authentication, compliance, platform behavior, and endpoint management.
• Have strong scripting and automation skills using Bash, Python, and/or Swift.
• Have practical experience using the JAMF Pro API for integrations, reporting, automation, and remediation.
• Demonstrate a successful record of delivering pilot-to-global rollouts, endpoint migrations, and controlled change programs at scale.
• Have experience integrating or operating JAMF Pro and Microsoft Intune in a cross-platform endpoint environment.
• Are able to communicate effectively and collaborate with IT, Security, IAM, ServiceNow, service desk partners, and L1/L2 technical support teams.
• Have experience creating technical documentation and coaching support teams to improve service quality and operational consistency.
• Have worked in regulated, security-focused, or compliance-driven environments.
• Have exposure to Nexthink for macOS endpoint analytics, remote actions, and proactive support.
• JAMF 200, JAMF 300, or JAMF 400 certification.
• Apple Certified IT Professional certification or equivalent Apple enterprise-management certification.
• Experience integrating JAMF Pro with ServiceNow for request fulfillment, incident routing, CMDB updates, and workflow automation.
• Familiarity with ServiceNow Now Assist capabilities and endpoint-support use cases.
• Experience implementing CIS macOS Benchmarks, FileVault key escrow, certificate management, and endpoint-hardening standards.
• Knowledge of Apple Business Manager, managed Apple IDs, and Apple enterprise deployment processes.

#LI-VGA1