MAC System Administrator: Secret clearance

Background

Support the U.S. Naval Observatory (USNO) N6 Department in the deployment, administration, and maintenance of IT systems and infrastructure supporting the Precise Time and Astrometry Network. The successful candidate will provide technical support to the Precise Time, Celestial Reference Frame, Earth Orientation, and Astronomical Applications Departments, assisting with the systems, platforms, and services required to support their mission operations. The candidate will also coordinate with USNO Information Assurance personnel to ensure systems comply with applicable DoD cybersecurity requirements and will assist in the development and maintenance of required technical and cybersecurity documentation.

Qualifications / Education / Experience

• Must hold and maintain CompTIA Security+ certification


• Experience administering and supporting macOS systems in an enterprise environment


• Experience with Jamf Pro for Mac device management, including enrollment, policies, configuration profiles, software deployment, and inventory


• Working knowledge of Apple Business Manager (ABM) and Automated Device Enrollment


• Familiarity with macOS security, permissions, FileVault, system settings, and user account management


• Working knowledge of Bash/shell scripting


• Experience troubleshooting macOS hardware, software, networking, and authentication issues


• Basic understanding of Active Directory and/or enterprise identity services as they relate to macOS


• Familiarity with software deployment, patching, and operating system updates

Required Experience: 3+ years

Required Education: Bachelor's or equivalent in a related field

Required Certifications: Security+ Certification

Desired Experience:

• Jamf certification(s) such as Jamf Certified Associate or Jamf Certified Tech


• Experience integrating Jamf Pro with Apple Business Manager


• Experience with Apple Platform SSO, Microsoft Entra ID, Active Directory, or other enterprise identity solutions


• Familiarity with Python or other scripting/automation languages


• Experience with macOS security hardening, DISA STIGs, CIS benchmarks, or similar security baselines


• Experience managing FileVault recovery keys, certificates, configuration profiles, and PPPC/TCC settings


• Familiarity with PKI/certificate management and 802.1X/Wi-Fi configuration on macOS


• Experience supporting macOS in a DoD or other regulated enterprise environment


• Familiarity with Git/version control and maintaining administrative scripts


• Knowledge of Apple deployment technologies such as Automated Device Enrollment, Bootstrap Tokens, Secure Tokens, and Recovery Lock

Security Clearance: Secret