MacOS Endpoint Management Consultant (Contract)

MacOS Endpoint Management Consultant (Contract) – KANDJI / IRU

PROJECT DETAILS:

Start: Early August 2026

Duration: Initial 4–6 weeks

Capacity: To be confirmed

Location / Working Arrangement: Fully Remote, Candidates have to be EU-based

Engagement: Contract / Project-based assignment

We are supporting a rapidly growing international technology and infrastructure organisation with the appointment of an experienced macOS Endpoint Management Consultant for an initial 4–6 week project.

The organisation is looking to design, build and implement a secure, standardised corporate MacBook configuration that can subsequently be handed over to its Managed Service Provider (MSP) for ongoing management and support.

Working closely with the organisation’s CISO and key IT stakeholders, the consultant will take technical ownership of the Mac endpoint build and configuration.

The successful consultant must have direct, hands-on commercial experience with Kandji (now Iru) and have previously designed, built or significantly improved enterprise macOS endpoint environments.

THE PROJECT:

• Work directly with the CISO and relevant IT stakeholders to define requirements for a standardised corporate MacBook configuration.

• Design and build a secure, scalable and supportable macOS endpoint configuration.

• Configure and implement Kandji / Iru as the endpoint management platform.

• Establish configuration profiles, policies, blueprints and device management standards.

• Configure Automated Device Enrolment and zero-touch deployment processes using Apple Business Manager and Kandji / Iru.

• Implement appropriate macOS security hardening and endpoint security controls.

• Configure FileVault encryption, recovery key management and relevant compliance policies.

• Define application deployment, patching, software update and configuration management processes.

• Configure identity, access and authentication requirements where applicable.

• Implement device compliance, monitoring and reporting policies.

• Test and validate the standard MacBook build before production handover.

• Troubleshoot configuration, deployment and compatibility issues during implementation.

• Produce clear technical documentation, configuration standards and operational procedures.

• Complete a structured knowledge transfer and handover to the organisation’s MSP for ongoing management.

REQUIRED EXPERIENCE:

• Strong commercial experience in macOS endpoint engineering, Mac platform engineering or Apple device management.

• Direct hands-on implementation and administration experience with Kandji / Iru.

• Previous experience designing and building standardised corporate MacBook configurations.

• Strong knowledge of macOS configuration profiles, policies, security controls and enterprise endpoint management.

• Experience with Apple Business Manager and Automated Device Enrolment.

• Strong understanding of zero-touch Mac deployment and device provisioning.

• Experience implementing FileVault encryption and enterprise macOS security standards.

• Experience with application packaging, deployment, patching and software update management.

• Knowledge of macOS security hardening and endpoint compliance.

• Experience documenting technical environments and handing completed solutions over to internal IT teams or Managed Service Providers.

• Ability to work independently and take ownership of a short, delivery-focused technical project.

DESIRABLE EXPERIENCE:

• Experience working directly with CISOs, security teams or senior IT leadership.

• Knowledge of CIS Benchmarks or other recognised macOS security hardening frameworks.

• Experience integrating macOS endpoints with enterprise identity providers and Single Sign-On solutions.

• Experience with Endpoint Detection and Response (EDR) and other enterprise security tooling.

• Scripting and automation experience using Bash, Zsh, Python or similar technologies.

• Previous experience delivering Mac endpoint management projects within international, high-growth or security-conscious organisations.

This is a hands-on delivery role requiring a consultant who can take ownership of the Mac endpoint environment, work collaboratively with the CISO, deliver a secure and repeatable corporate MacBook configuration, and leave behind a well-documented platform that can be effectively managed by the organisation’s MSP.

Contact: Elvis Eckardt