Senior Endpoints Engineer, macOS & JAMF
Thomson Reuters · Hyderabad, India +1 · 10d ago
At Thomson Reuters, our technology drives global markets and helps professionals around the world make decisions that matter. As a leading provider of intelligent information, we are looking for talented professionals who can bring fresh perspectives and innovative solutions that advance our business and support their career growth.We are seeking a highly skilled Senior Endpoints Engineer with deep expertise in macOS enterprise management, JAMF Pro, and JAMF Connect. This role will be responsible for shaping, deploying, operating, and supporting the Mac platform across the organization.
About the Role:
As a Senior Endpoints Engineer, you will play a key role in defining and delivering the technical strategy for Thomson Reuters' macOS endpoint environment. You will work closely with IT, Security, IAM, ServiceNow, and service desk teams to provide a secure, scalable, and user-focused Mac experience.
- Lead the end-to-end design, implementation, administration, and optimization of JAMF Pro and JAMF Connect.
- Drive JAMF initiatives from technical design and pilot phases through global deployment, migration, controlled change, and transition to business-as-usual support.
- Define and implement Mac authentication strategies, including Platform SSO, SSO, MFA, passwordless authentication, and identity integration with Microsoft Entra ID and/or Okta.
- Design and manage macOS enrollment and device lifecycle workflows, including Automated Device Enrollment, re-enrollment, compliance policies, patching, software deployment, and Self Service capabilities.
- Create and maintain JAMF Pro configuration profiles, policies, smart groups, extension attributes, application deployment workflows, and compliance reporting.
- Develop automation, remediation, integration, and reporting solutions using Bash, Python, Swift, and the JAMF Pro API.
- Lead macOS endpoint-hardening efforts, including FileVault, Gatekeeper, CIS Benchmarks, PPPC/TCC permissions, system extensions, kernel extensions, and patch compliance.
- Partner with Information Security and IAM teams to support conditional access, identity integration, endpoint compliance, and security-control implementation.
- Act as the L3 escalation point for complex macOS issues involving endpoint performance, identity, authentication, device compliance, operating system behavior, and JAMF management.
- Produce technical documentation, troubleshooting guides, knowledge articles, and operational runbooks to support consistent service delivery.
- Coach and support L1/L2 engineers and the HCL service desk partner to strengthen macOS support capability and maintain BAU service quality.
- Build and enhance ServiceNow integrations for JAMF Pro, including request fulfillment, incident routing, endpoint workflows, and configuration management.
- Contribute to ServiceNow Now Assist workflows and automation opportunities for macOS support.
- Use Nexthink capabilities, where applicable, to support macOS endpoint analytics, remote actions, proactive remediation, and user-experience improvements.
- Collaborate with Intune and endpoint engineering teams to ensure aligned processes and standards across cross-platform endpoint environments.
About You:
You are an experienced endpoint engineer with strong technical expertise in enterprise macOS management and a proven ability to deliver large-scale JAMF solutions. You are comfortable working across technical teams, translating complex requirements into practical endpoint solutions, and supporting a secure, high-quality user experience.
- Have 6–10 years of endpoint engineering experience, including substantial hands-on experience with JAMF Pro and JAMF Connect.
- Possess advanced knowledge of macOS enterprise management, including MDM enrollment, Automated Device Enrollment, configuration profiles, compliance policies, PPPC/TCC controls, and kernel and system extension policies.
- Have hands-on experience designing and supporting macOS authentication solutions using Platform SSO, SSO, MFA, passwordless authentication, Microsoft Entra ID, and/or Okta.
- Understand identity integration, conditional access, authentication policies, and endpoint compliance requirements in an enterprise environment.
- Bring strong L3 troubleshooting expertise for complex macOS issues related to performance, identity, authentication, compliance, platform behavior, and endpoint management.
- Have strong scripting and automation skills using Bash, Python, and/or Swift.
- Have practical experience using the JAMF Pro API for integrations, reporting, automation, and remediation.
- Demonstrate a successful record of delivering pilot-to-global rollouts, endpoint migrations, and controlled change programs at scale.
- Have experience integrating or operating JAMF Pro and Microsoft Intune in a cross-platform endpoint environment.
- Are able to communicate effectively and collaborate with IT, Security, IAM, ServiceNow, service desk partners, and L1/L2 technical support teams.
- Have experience creating technical documentation and coaching support teams to improve service quality and operational consistency.
- Have worked in regulated, security-focused, or compliance-driven environments.
- Have exposure to Nexthink for macOS endpoint analytics, remote actions, and proactive support.
- JAMF 200, JAMF 300, or JAMF 400 certification.
- Apple Certified IT Professional certification or equivalent Apple enterprise-management certification.
- Experience integrating JAMF Pro with ServiceNow for request fulfillment, incident routing, CMDB updates, and workflow automation.
- Familiarity with ServiceNow Now Assist capabilities and endpoint-support use cases.
- Experience implementing CIS macOS Benchmarks, FileVault key escrow, certificate management, and endpoint-hardening standards.
- Knowledge of Apple Business Manager, managed Apple IDs, and Apple enterprise deployment processes.
#LI-VGA1
What’s in it For You?
Hybrid Work Model: We’ve adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected.
Flexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset. This builds upon our flexible work arrangements, including work from anywhere for up to 8 weeks per year, empowering employees to achieve a better work-life balance.
Career Development and Growth: By fostering a culture of continuous learning and skill development, we prepare our talent to tackle tomorrow’s challenges and deliver real-world solutions. Our Grow My Way programming and skills-first approach ensures you have the tools and knowledge to grow, lead, and thrive in an AI-enabled future.
Industry Competitive Benefits: We offer comprehensive benefit plans to include flexible vacation, two company-wide Mental Health Days off, access to the Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing.
Culture: Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more. We live by our values: Obsess over our Customers, Compete to Win, Challenge (Y)our Thinking, Act Fast / Learn Fast, and Stronger Together.
Social Impact: Make an impact in your community with our Social Impact Institute. We offer employees two paid volunteer days off annually and opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives.
Making a Real-World Impact: We are one of the few companies globally that helps its customers pursue justice, truth, and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world.
About Us
Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media. Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency. Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news.
We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments. At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them. Sound exciting? Join us and help shape the industries that move society forward.
As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace.
We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law. More information on requesting an accommodation here.
Learn more on how to protect yourself from fraudulent job postings here.
More information about Thomson Reuters can be found on thomsonreuters.com.