macOS & Jamf Automation Specialist

About the job

We are looking for a hands-on macOS & Jamf Automation Specialist to engineer, automate and continuously improve the services that support our global Apple device estate. This role is focused on delivering a secure, reliable and consistent macOS experience at scale through Jamf Pro, reusable code, APIs and modern engineering practices.
You will replace repetitive administration and one-off scripts with maintainable automation for device enrolment, configuration, application delivery, patching, compliance and lifecycle management. Working across Jamf Pro, Apple Business Manager, identity, security, asset and service-management platforms, you will build integrations and workflows that make Apple device services easier to operate, measure and support.

Engineering mindset
Automation is the product, not an afterthought. We are looking for someone who sees a manual Jamf task, fragile policy or recurring Mac support issue and asks, “How can we make this reliable, reusable and self-service?”

You should be comfortable working from Apple and Jamf documentation, investigating unfamiliar behaviours and translating operational requirements into production-quality automation. Your solutions account for failure, test changes before release, scale to an enterprise environment, provide useful telemetry and favour reusable frameworks over isolated scripts. You take ownership from design through operation, document your work and balance long-term platform improvements with immediate business needs.
What success looks like
You will measurably reduce manual effort, deployment lead time and configuration drift across the macOS estate. Enrollment, configuration, software delivery, patching, security compliance and device lifecycle processes will become increasingly automated, observable, auditable and recoverable.
Over time, you will establish a scalable Apple endpoint automation model based on Jamf Pro, APIs, version-controlled code, release pipelines and shared engineering standards rather than manual platform administration.

What you'll do

macOS Platform & Jamf Automation

• Design and maintain automation for macOS enrolment, provisioning, configuration, application delivery, updates and device retirement using Jamf Pro.

• Build reusable scripts, tools and workflows using shell scripting, Python, Jamf APIs and other appropriate technologies.

• Administer and automate Jamf policies, configuration profiles, Jamf Blueprints, Jamf compliance, extension attributes, smart groups, packages and lifecycle workflows.

• Integrate Jamf Pro and Apple Business Manager with identity, security, asset, infrastructure and service-management platforms.

• Apply Git, CI/CD, automated testing and configuration-as-code practices so Apple platform changes are controlled, repeatable and auditable.

Security, Compliance & Observability

• Translate macOS security and compliance requirements into Jamf configuration profiles, automated controls and measurable outcomes.

• Automate macOS and third-party application patching, vulnerability remediation and exception handling.

• Build guardrails for FileVault, endpoint protection, authentication, privacy controls and device compliance.

• Create inventory, telemetry, dashboards and alerting that provide actionable visibility into automation performance, Mac health and risk.

• Partner with Security teams to automate evidence collection, audit reporting and remediation workflows for the Apple estate.

Engineering, Lifecycle & Support

• Define the macOS and Jamf automation architecture, engineering standards and roadmap for a global Apple device service.

• Engineer automated packaging, deployment, update and rollback pipelines for macOS applications.

• Evaluate Jamf, Apple and related ecosystem capabilities, APIs and emerging technologies to simplify or extend the service.

• Troubleshoot complex failures across macOS, Jamf, identity, networking, security and application-delivery services.

• Convert recurring Mac incidents and support escalations into automated detection, remediation or prevention.

• Document designs, code, operating procedures and support models, and enable support teams to use them effectively.

What you'll need

• Jamf 300 certification.

• 4+ years of experience engineering and automating macOS services in a modern enterprise environment.

• Deep hands-on expertise with Jamf Pro, including policies, profiles, smart groups, extension attributes, inventory, application deployment and API-based administration.

• Strong knowledge of macOS management, Apple Business Manager, Automated Device Enrollment, declarative device management and Apple security controls.

• Ability to build production-quality automation using shell scripting, Python, REST APIs and structured data formats, supported by Git, CI/CD, testing, secrets management, Jamf webhooks and code review.

• Experience automating macOS application packaging, deployment, patching and vulnerability remediation; a bachelor’s degree in IT or Computer Science, or equivalent practical experience.

Additional experience that would be valuable:

• Experience with identity integrations, Platform SSO, certificate services, zero-touch deployment and device trust.

• Knowledge of Installomator, swiftDialog, Nudge, or similar community and enterprise macOS automation tooling.

• Experience integrating Jamf with ServiceNow, asset-management, security, observability or data platforms.

• Cloud services, serverless functions, SQL or reporting technologies used to host integrations and analyse endpoint data.

• Familiarity with Microsoft Intune, Linux or mobile device management in a broader endpoint environment.

What we offer

A competitive compensation package, of course.

Time and resources to grow and develop, including a personal development budget and paid leave for learning days, as well as paid access to e-learning resources such as O’Reilly and LinkedIn Learning.

Time to support life outside of work, with enhanced parental leave plus paid leave to care for loved ones and volunteer in local communities.

Work flexibility, where TomTom’ers, in agreement with their manager and team, use both the office and home to focus, collaborate, learn and socialize. It’s all about getting the best out of both worlds – we ask TomTom’ers to come to the office two days a week, and the remaining three are free to be worked in either location.

Improve your home office with a setup budget and get extra support with a monthly allowance.

Enjoy options to work from your home country and abroad for a set number of days each year, to visit family and friends, or to simply explore the world we’re mapping.

Take the holidays you want with a competitive holiday plan, plus an extra day off to celebrate your birthday.

Join annual events like our Hackathon and DevDays to bring your ideas to life with talented teammates from around the world.

Become a part of our inclusive global culture and have the chance to collaborate with a diverse community – we have over 80 nationalities at TomTom!

Find out more about our global benefits and enjoy additional local benefits tailored to your location.

Meet your team

We’re Employee IT. We’re on a mission to deliver a seamless user experience for TomTom'ers across. Whether we're creating solutions to enable collaboration, increase productivity or help people communicate, your work will ensure TomTom'ers are equipped to create the first real-time map. In our team, you’ll help design, develop, deliver, operate and support solutions through a defined set of services, so that we can continue to bring people closer to the world around them.

At TomTom...

You’ll help people find their way in the world. In 2004, TomTom revolutionized how the world moves with the introduction of the first portable navigation device. Now, we intend to do it again by engineering the first-ever real-time map, the smartest and most useful map on the planet.