NTT DATA is seeking a highly skilled Systems Engineering Senior Specialist with extensive experience in Apple macOS endpoint management utilizing Microsoft Intune. This role serves as a critical technical subject matter expert and L3 escalation point for enterprise macOS environments. The primary focus is on managing the complete device lifecycle, ensuring compliance, strengthening security configurations, deploying applications, and driving endpoint modernization efforts.

This position demands deep knowledge of macOS administration, Microsoft Intune, Apple Business Manager (ABM), Automated Device Enrollment (ADE), Conditional Access, and endpoint security best practices. The ideal candidate will collaborate closely with cross-functional teams, including security, identity, service delivery, and infrastructure, to guarantee a secure, compliant, and seamless end-user experience.

Join a forward-thinking organization dedicated to client success and positive societal impact through innovation. We are a global leader in digital infrastructure and AI, offering unparalleled capabilities to help organizations navigate the digital future.

Manage and administer enterprise macOS devices through Microsoft Intune, including designing and implementing device enrollment strategies via ABM and ADE. Oversee the full macOS lifecycle from provisioning and configuration to compliance, patching, and retirement. Configure and maintain essential device policies, such as restrictions, Wi-Fi, VPN, certificates, and software deployment, while supporting zero-touch deployment initiatives.

Design and implement Intune device compliance and configuration policies, manage device groups, application deployment, and software updates. Integrate Conditional Access with Microsoft Entra ID and manage the Company Portal for self-service application delivery. Leverage Intune reporting to enhance endpoint health and compliance.

Implement robust security baselines and hardening standards for macOS endpoints, manage FileVault encryption and recovery keys, and support Microsoft Defender for Endpoint integration. Ensure compliance with organizational security requirements and perform remediation for non-compliant devices and security findings.

Package, deploy, update, and retire applications, including App Store, LOB, and PKG applications, through Intune. Manage operating system updates and application patching, troubleshooting deployment failures and policy conflicts. Maintain governance over the application lifecycle.

Serve as an L3 escalation point for complex macOS and Intune-related issues, conducting root cause analysis and implementing preventive measures. Troubleshoot enrollment, compliance, certificate, application deployment, and Conditional Access challenges. Participate in incident and change management processes.

Develop automation solutions using PowerShell, Shell scripting, and Microsoft Graph API. Implement proactive remediation and monitoring. Drive continuous improvement in operations, process standardization, and service optimization. Create and maintain comprehensive technical documentation, SOPs, and knowledge articles.

Collaborate effectively with security, infrastructure, networking, and identity teams. Engage in customer governance and operational reviews. Provide technical guidance and mentorship to junior engineers. Support transition, transformation, and modernization projects.

Possess strong expertise in Microsoft Intune for macOS Management and core macOS Administration principles. Demonstrable experience with Apple Business Manager (ABM), Apple Automated Device Enrollment (ADE/DEP), Microsoft Entra ID (Azure AD), and Conditional Access is essential. Familiarity with Microsoft Defender for Endpoint and the Apple MDM Framework is required.

Proficiency in managing Device Compliance Policies, Configuration Profiles, Endpoint Security Policies, Application Deployment, and Device Lifecycle Management. Experience with Zero-Touch Provisioning and Company Portal Administration is expected.

Solid understanding of macOS Ventura, Sonoma, and later versions, with basic administration knowledge of iOS/iPadOS. A good understanding of Windows Endpoint Management is also beneficial.

Skilled in automation and scripting, including PowerShell, Shell/Bash Scripting, and Microsoft Graph API. Experience with Automation and Remediation Scripting is necessary.

Experience with ITSM processes such as Incident Management, Problem Management, Change Management, and the ITIL Framework is required. ServiceNow experience is preferred.

Possess strong customer-facing communication skills, excellent troubleshooting and analytical thinking abilities, and the capacity to operate independently in enterprise environments. Strong documentation and process management skills are vital. Experience mentoring junior engineers and working within global support and cross-functional teams is desirable.