Desktop Endpoint Specialist

Halvik Corp delivers a wide range of services to 13 executive agencies and 15 independent agencies. Halvik is a highly successful WOB business with more than 50 prime contracts and 500 professionals delivering Digital Services Advanced Analytics Artificial Intelligence/Machine Learning Cyber Security and Cutting-Edge Technology across the US Government. Be a part of something special!

Position Overview

Halvik is seeking a candidate who will be responsible for designing deploying configuring administering and supporting enterprise endpoint management solutions. The ideal candidate will have direct experience with Jamf Pro and Apple device management with supporting experience in Microsoft Intune.

This role in on-site in Boulder CO daily M-F.

Core Responsibilities

• Design deploy configure and administer Jamf Pro server infrastructure in enterprise environments.
• Perform Jamf Pro installation initial configuration upgrades patching backup and troubleshooting.
• Configure Jamf Pro components including JSS database web/application services APNs SSL certificates and integrations.
• Configure Apple Business Manager (ABM) and integrate it with Jamf Pro for Automated Device Enrollment (ADE).
• Configure and manage PreStage Enrollments enrollment profiles configuration profiles policies Smart Groups and Extension Attributes.
• Manage macOS iOS and iPadOS device enrollment configuration compliance and lifecycle management.
• Package test deploy and maintain macOS applications using Jamf Pro.
• Create Jamf policies and Bash/shell scripts to automate endpoint configuration and administration.
• Manage FileVault encryption recovery keys security settings certificates and endpoint compliance.
• Troubleshoot Jamf enrollment policy execution application deployment configuration profile certificate APNs and connectivity issues.
• Perform Jamf Pro upgrades and migrations including pre-upgrade validation backups testing and post-upgrade verification.
• Integrate Jamf with Microsoft Entra ID Active Directory SSO/SAML and enterprise security platforms.
• Support Microsoft Intune for Windows and mobile device management including enrollment configuration policies compliance policies and application deployment.
• Support integration/co-management between Jamf Pro and Microsoft Intune where required.
• Support endpoint security solutions such as Microsoft Defender CrowdStrike and Zscaler.
• Monitor endpoint inventory compliance application status and Jamf infrastructure health.
• Develop endpoint standards technical documentation deployment procedures and troubleshooting guides.
• Work with Security Network Infrastructure and Service Desk teams to resolve complex endpoint issues.
• Participate in endpoint migration device refresh OS upgrade and enterprise deployment projects.
• Follow enterprise change incident problem-management and security processes.

Minimum Requirements

• Education: AA/AS degree (or equivalent).
• Experience: Minimum 6 years of experience supporting endpoint management enterprise mobility systems administration or related enterprise IT environments.
• Technical Proficiency:
  • Strong hands-on experience with Jamf Pro server deployment and administration.
  • Experience installing configuring upgrading and troubleshooting Jamf Pro infrastructure.
  • Strong knowledge of macOS administration and Apple MDM.
  • Experience with Apple Business Manager Automated Device Enrollment APNs PreStage Enrollments configuration profiles policies and Smart Groups.
  • Experience with Bash/shell scripting and endpoint automation.
  • Knowledge of FileVault certificates SSL/TLS endpoint security and compliance.
  • Experience integrating Jamf with Entra ID/Active Directory and SSO/SAML.
  • Working knowledge of Microsoft Intune and Microsoft endpoint management.
  • Strong troubleshooting and enterprise endpoint-management experience.
  • Experience with Jamf Protect and Jamf Connect.
• Certifications: While not mandatory possession will have more weight in consideration (i.e. Jamf Certified Associate Administrator or Engineer).
• Must have an active Secret security clearance

Preferred Expertise

• Demonstrated success supporting Federal contracts.
• Strong technical analysis and troubleshooting capability and skills; ability to escalate complex issues; strong technical documentation skills.
• Strong analytical written and verbal communication skills with the ability to translate technical risks and content into terms suitable for executive and government stakeholders.
• Ability to work collaboratively with others and contribute to a team environment.