Apple/macOS Subject Matter Expert (SME) at Aveshka Inc

Washington, District of Columbia, United States -

Full Time

Start Date

Immediate

Expiry Date

14 Sep, 26

Salary

0.0

Posted On

16 Jun, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

macOS Engineering, JAMF Pro, Endpoint Configuration, Cybersecurity, Identity & Device Lifecycle, Patch Management, Security Architecture, Telemetry & Logging, VDI, Incident Response, Change Control, Asset Inventory

Industry

IT Services and IT Consulting

Description

Apple/macOS Subject Matter Expert (SME) Position Summary Softtek Government Solutions is seeking highly cleared, experienced IT engineering professionals to support the Congressional Budget Office (CBO) Service Desk Engineering task order. This initiative focuses on fundamentally hardening the CBO’s enterprise environment to reduce the risk of unauthorized lateral movement, credential misuse, and persistence techniques. Note: This is an advanced engineering scope focused on resolving complex escalations, implementing security architecture, and developing automated workflows. It does not involve routine Tier 1 end-user help desk support. The engineering team will be responsible for designing, deploying, and maintaining the technical controls necessary to secure endpoint, identity, and device lifecycle operations. Responsibilities * Endpoint Configuration & Imaging: Designing and maintaining secure, standardized workstation images for macOS and Windows that support both on-site and remote VDI access. * Patch & Baseline Management: Implementing endpoint configuration baselines, robust patching workflows, and version control using enterprise tools (e.g., Ivanti, KACE, Intune, GPO) to mitigate configuration drift. * Identity & Device Lifecycle: Strengthening device registration, enrollment processes (Autopilot, JAMF), and asset inventory accuracy. This includes enforcing conditional access and hardware-backed, passwordless authentication methods. * Telemetry & Incident Readiness: Enhancing endpoint logging, telemetry forwarding, and monitoring capabilities to support the CBO’s incident response and forensic investigation functions. * Operational Documentation: Producing user-facing runbooks, remediation plans, and clear escalation paths to ensure solutions are operationally sustainable by Tier 1 Service Desk and Incident Response teams Education * Bachelor's degree in Information Technology, Cybersecurity, or a related field. Formal education requirements may be waived based on relevant professional experience Qualifications * Must be a US Citizen * Minimum 8 years of experience in IT, Endpoint Engineering, or Cybersecurity, with at least 6 years in engineering (not help desk) roles in enterprise environments. * Expertise building and maintaining macOS workstation images. * Extensive experience using JAMF Pro for macOS endpoint management. * In-depth knowledge of macOS security architectures, FileVault key escrow, and macOS Unified Logging telemetry. * Experience working under formal change control, audit, and security governance processes. Required Clearance * Active Top Secret (TS) security clearance. About Softtek Government Solutions Softtek Government Solutions is a professional services firm focused on addressing our nation’s most complex threats and challenges. As a small business we’re committed to supporting our clients’ missions with services delivered by our diverse and experienced staff. With expertise in cybersecurity, emergency preparedness, and public health, our experience base spans federal, state, and local governments, as well as private sector entities. Softtek Government Solutions encourages collaborative communication and ongoing learning. Some of our benefits include: * Extensive training programs * Gym membership reimbursement * Education reimbursement * Technology benefits * Commuter benefits * Generous paid time off and much more! Softtek Government Solutions is an Equal Opportunity Employer (EOE)

Responsibilities

Design, deploy, and maintain secure macOS and Windows workstation images and technical controls to harden the enterprise environment. Develop automated workflows, manage patching baselines, and enhance endpoint telemetry to support incident response.