Senior MacOS Specialist (Microsoft Intune)

Company: EPAM Systems

We are seeking a Senior MacOS Specialist (Microsoft Intune) to join our Windows-centric IT team with zero in-house MacOS expertise. We require a hands-on architect to design and implement the foundational Microsoft Intune configuration for our MacOS fleet from the ground up. Your primary deliverable is not just a working device, but self-sufficiency for our team. You will build the framework, then mentor and upskill our internal Intune Administrator so they can own the environment long-term.
Unlock the potential of remote work in Kazakhstan, giving you the flexibility to work from home or access our offices in Astana, Almaty or Karaganda.
Responsibilities
* Definition of the Intune policy structure, dynamic device groups and compliance baselines for MacOS specifically
* Implementation and testing of Conditional Access policies specific to MacOS endpoints (e.g. requiring compliant device for Entra ID access)
* Establishment of the MDM Push Certificate connection, Apple Business Manager integration and initial Enrollment Program Token setup
* Hands-on creation of Custom Configuration Profiles (.mobileconfig creation), FileVault 2 policy enforcement with escrow key handling and System Extensions Allow listing
* Development of Bash/Zsh scripts for Intune Shell Script deployment
* Integration of Apple Business Manager with Intune to enable Automated Device Enrollment (ADE/Zero-Touch)
* Translation of complex MacOS security terminology (Gatekeeper, TCC, PPPC) into actionable guidance for a Windows Admin
* Provision of Standard Operating Procedures documentation specifically written for a non-MacOS literate team
* Facilitation of working sessions with our internal IT Team Lead to ensure they can add a new application or modify a Firewall rule independently by the end of the engagement
* Debugging of failing Configuration Profiles (e.g. issues with 'sudo profiles renew -type enrollment' and log analysis)
* Mentorship and upskilling of the internal Intune Administrator currently focused on Windows
Requirements
* 4+ years of enterprise IT experience
* Minimum 2 full project lifecycles as the sole lead for MacOS Intune configuration setup, not just maintenance or support
* Proven capability to configure MacOS management in Intune from scratch, including comfort with the "first login" admin experience
* Expertise in building security configuration at builder level rather than monitoring only
* Proficiency in writing Bash/Zsh scripts for Intune Shell Script deployment
* Skills in knowledge transfer and enablement for a non-MacOS literate team
* Endpoint Administrator Associate (MD-102) combined with demonstrable Apple Platform Deployment training
* English proficiency at B2 level or higher
Nice to have
* Experience migrating away from another MDM (e.g. Jamf Pro, Kandji) into Intune
* Background in Financial Services compliance hardening (e.g. CIS Benchmarks for macOS)
* Proven track record of conducting "reverse shadowing" to ensure learning transfer
We offer
* We connect like-minded people:
* Delivering innovative solutions to industry leaders, making a global impact
* Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
* Opportunity to work abroad for up to two months per year
* Relocation opportunities within our offices in 55+ countries
* Corporate and social events
* We invest in your growth:
* Leadership development, career advising, soft skills and well-being programs
* Certifications, including GCP, Azure and AWS
* Unlimited access to LinkedIn Learning and Udemy
* Free English classes with certified teachers
* Discounts in local language schools, including online courses for the Kazakh language
* We cover it all:
* Participation in the Employee Stock Purchase Plan
* Monetary bonuses for engaging in the referral program
* Medical & family care package
* Six trust days per year (sick leave without a medical certificate)
* Coverage of psychology sessions of your choice
* Benefits package (sports activities, a variety of stores and services)
EPAM is a team of technologists and innovators united by a passion for technology. In Kazakhstan, we operate across all cities with offices in Astana, Almaty, and Karaganda and work with the world's leading companies from different industries. In 2023, EPAM received the Export Excellence Award at the esteemed Digital Bridge Awards, showcasing our commitment to excellence and innovation.

apply