Lead Mac Platform Engineer

Capital One

Mac Platform Engineer securing Capital One’s 40,000+ macOS endpoints through vulnerability management. Packaging patches, improving observability, and validating endpoint software and agents.

Posted 9/2/2026full-timeRichmond • Texas, Virginia • 🇺🇸 United StatesSenior💰 $149,800 - $188,100 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management and patching for macOS devices, utilizing tools like JAMF Pro and scripting languages such as Shell, AppleScript, or Python. Proven ability to enhance endpoint security posture and compliance through effective collaboration and automation.

Highest-signal resume keywords

Vulnerability ManagementJAMF ProShell ScriptingPackaging ToolsAgile Environment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementPatch ManagementShell ScriptingAppleScriptPython ScriptingJAMF ProPackaging ToolsAutomation ProcessesSoftware TestingCompliance Metrics

Soft Skills

CollaborationProblem-SolvingCommunication

Tools & Technologies

JAMF's ComposerApple's Package UtilitySuspicious PackageQualysCrowdstrikeSymantecTrellixNessus

Certifications & Qualifications

JAMF Pro 200JAMF Pro 300JAMF Pro 400

Industry Keywords

MacOS DevicesChange ManagementVulnerability Reporting ToolsEndpoint SecurityMac Admins Community

Tech Stack

Tools & technologies

JamfMacOSOpen SourcePython

About the role

Key responsibilities & impact

Package, test, and schedule routine patches for business software when vulnerability patch fixes are released
Review vulnerability management reports and investigate devices with active vulnerabilities to reduce vulnerable endpoints
Engage with vulnerability management partners to debug false positives and obtain vulnerability information
Escalate vulnerabilities and patching operations requiring exceptions due to potential user impact
Assist with business-as-usual packaging requests for new software and software updates
Research and suggest improvements to endpoint vulnerability management posture and compliance metrics
Periodically review automation processes to ensure they work as expected and automatically update client software
Assist with testing and validating new software and agents planned for deployment
Improve vulnerability observability with telemetry from Mac endpoints to inform decisions and alert on emerging problems
Support other members of the engineering team with software testing and validation

Requirements

What you’ll need

High School Diploma, GED, or equivalent certification
At least 2 years of experience managing macOS devices leveraging JAMF Pro
At least 2 years of experience with Vulnerability Management and patching
At least 2 years of experience using packaging tools (JAMF's Composer, Apple's package utility, or Suspicious Package)
At least 2 years of experience developing Shell scripts, AppleScript, or Python scripts
Bachelor's Degree preferred
One or more JAMF Pro Certifications: JAMF Pro 200, 300, or 400 preferred
2+ years of experience in Change Management process preferred
2+ years of experience working within an Agile environment preferred
2+ years of experience with vulnerability management reporting tools: Qualys, Crowdstrike, Symantec, Trellix, or Nessus preferred
Experience with Mac Admins community and available open source solutions preferred

Benefits

Comp & perks

Performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
Comprehensive, competitive, and inclusive health, financial and other benefits supporting total well-being
Reasonable accommodations for applicants with disabilities