Mac Endpoint Engineer (macOS)

Location: Buffalo, New York, United States; four days onsite at Seneca One and one day per week working from home.

Salary: $97,100–$161,800 annual (USD).

Company

M&T Bank is a banking and financial services organization.

What you will do

• Design, implement, administer, and maintain enterprise macOS workstation solutions.
• Manage Apple device provisioning, deployment, upgrades, refreshes, and retirement through Apple Business Manager, Automated Device Enrollment, Intune, and Jamf.
• Develop configuration profiles, compliance policies, security baselines, operating system updates, patches, and application upgrades.
• Package, deploy, test, support, and roll back Mac applications across macOS releases.
• Implement endpoint security controls, encryption, compliance monitoring, and vulnerability remediation with Cybersecurity teams.
• Automate administrative functions, document technical standards, support incident and change management, and lead small-to-medium engineering initiatives.

Requirements

• At least 4 years of endpoint engineering experience and 3 years supporting enterprise macOS environments.
• Combined minimum of 6 years of higher education and/or work experience in systems design, management, or architecture.
• Experience with macOS administration, the Apple ecosystem, Jamf Pro, Apple Business Manager, Automated Device Enrollment, and endpoint management.
• Knowledge of endpoint security, compliance, device management best practices, Declarative Device Management, Jamf APIs, and Platform SSO.
• Experience with scripting and automation using PowerShell, Bash, or similar tools, plus strong troubleshooting and analytical skills.
• Ability to work onsite four days per week in Buffalo, New York.

Nice to have

• Experience supporting enterprise Windows environments.
• Knowledge of Microsoft Entra ID, Microsoft 365, Azure, Intune, Configuration Manager, and enterprise application packaging.
• Experience in banking, financial services, or another highly regulated industry.

Culture & Benefits

• Work with infrastructure, security, application, and support teams.
• Participate in on-call support activities as required.
• Work in an environment focused on secure, compliant, and reliable endpoint services.