IT Specialist - Macbook
Location: London (Hybrid – to be discussed )
Rate: Up to £675 per day (Inside IR35)
Contract: 6 months
Clearance: SC
Role Details -
Our Government client is looking for an experienced, skilled IT Specialist (end-user compute) to work on a project to build and support a fleet of managed MacBooks. This is essentially a mini IT support function being set up from scratch you will need to know macbooks inside out. For some of the work you will need to be physically present in our London office.
You will:
Review our proposed device build, including lockdowns, and our proposed tools for mobile device management (MDM), endpoint detection and response (EDR) and Secure Access Service Edge (SASE).
Conduct a proof-of-concept for remotely managing devices in accordance with a set of defined policies. This will involve setting up test instances of the tools listed in 1. and trialling these with some test devices.
Conduct a proof-of-concept for provisioning devices automatically and at scale using Infrastructure as Code (IaC).
Set up and support production instances of the tools listed in 1., to include establishing event log feeds from these tools to a SIEM system and integration with an Identity Provider (IdP).
Be responsible for managing a fleet of devices, including inventory management, provisioning devices, handing over provisioned devices to end-users and receiving returned devices.
Provide IT support to end-users.
We are interested in people with:
Deep knowledge of macOS (both the GUI and the command line)
Experience of manually configuring macOS, including its native security features, to implement a defined set of security lockdowns such as NCSC’s Device security guidance - macOS or the CIS Hardening guidelines.
Experience of setting up and using the Jamf suite (Jamf Pro, Jamf Protect, Jamf ZTNA and Jamf Connect) to manage a fleet of MacBooks. To include using Jamf for:
Mobile Device Management (MDM)
Patch management
Endpoint detection and response (EDR)
Secure Access Service Edge (SASE)
Experience of using Jamf Pro with a Terraform provider and a CI/CD pipeline to provision MacBooks from IaC, including writing scripts to support this