EUC Engineer (MacOS)
Location: Fully Remote - Flexibility for occasional UK travel
Role
Own and support the day-to-day management of the enterprise Mac estate, ensuring devices remain secure, compliant, reliable and well documented. The role combines hands-on macOS and Intune administration with incident resolution, service improvement and clear engagement with users, suppliers and technical teams.
Key responsibilities
- Administer macOS devices through Microsoft Intune including enrolment, configuration profiles, compliance policies, application deployment and user assignment.
- Plan and deliver macOS upgrades, maintain minimum OS (to Cyber Essentials Plus standards) and build requirements, and keep enrolment and user guidance current after major releases.
- Manage Mac application packaging, updates and remote settings, using scripting and automation where appropriate.
- Triage and resolve Mac incidents and requests, including enrolment, password recovery, VPN/access issues, application faults and device rebuilds or wipes.
- Review vulnerability reporting, remediation to Cyber Essentials Plus standards, and work with Security, Architecture, Identity, Service Management and suppliers on risks and changes.
- Maintain technical and user documentation, contribute to root cause analysis, and identify service improvements with clear business and user value.
- Follow ITIL/ITSM controls for incident, problem and change management, meet agreed service levels, and support out-of-hours activity when required.
Experience and capabilities
Essential
- Significant hands-on experience supporting macOS in an enterprise environment.
- Practical Intune experience across Mac and mobile device management, application deployment and policy enforcement.
- Strong troubleshooting and decision-making skills, including escalated incident coordination.
- Knowledge of Azure AD / Entra ID, Active Directory integration and Mac identity or access dependencies.
- Ability to explain complex technical topics clearly to non-technical users and stakeholders.
- Mac application packaging and experience with Apple Business Manager.
- UK Security Clearance eligibility/holding as required.
Desirable
- PowerShell or other scripting and automation experience.
- Experience using Tenable and managing vulnerabilities against CE+ standards.
- Understanding of ITIL/ITSM practices and incident or root cause reporting.
- Relevant Intune, Microsoft, Apple, Agile or ITIL certification.
- Experience configuring and managing devices using Jamf for assessing/planning future service improvements (we currently do not use Jamf)
Personal attributes
- Technically curious, customer-focused and collaborative. Able to work independently in a hybrid environment, learn emerging technology quickly, challenge constructively, and balance innovation with security, architecture and operational governance.