Lead macOS / Endpoint Architect & Engineer

ROLE OVERVIEW

Azooa is seeking expressions of interest from an experienced macOS endpoint architect and engineer to lead the design and implementation of a proposed enterprise macOS management uplift for the National Museum of Australia.

The engagement will improve reliability, security and maintainability using Apple Business Manager and Microsoft Intune, and establish a sustainable operating model for ongoing device management and Level 2 and Level 3 support. This hands-on technical leadership role combines architecture, engineering and delivery coordination from discovery through to business-as-usual handover.

ENGAGEMENT DETAILS

• Location: Canberra, ACT.

• Working arrangement: hybrid, with onsite attendance as required. Attendance and service coverage will be agreed with the client.

• Proposed contract opportunity, subject to procurement outcome, client selection and confirmed scope.

• Indicative project commencement: 30 November 2026.

• Service term: initial 12 months, with two possible 12-month extensions, subject to approval. Individual allocation and duration will depend on the agreed delivery model.

KEY RESPONSIBILITIES

Discovery and solution architecture

• Assess the existing macOS environment, management configuration, operational processes and support dependencies.

• Confirm scope, requirements, assumptions, constraints, risks and responsibilities with client stakeholders.

• Design the future-state macOS management architecture using Apple Business Manager and Microsoft Intune.

• Define enrolment, onboarding, provisioning, configuration, compliance, application delivery and device lifecycle processes.

• Develop an operating model covering administration, support ownership, escalation and service desk integration.

• Document design decisions, dependencies and implementation requirements.

Endpoint engineering and implementation

• Configure Apple Business Manager and Intune integration, including Automated Device Enrolment where applicable.

• Implement standard configuration baselines, configuration profiles, compliance policies and reporting.

• Establish application packaging, deployment and version-management processes.

• Implement macOS upgrade and security-update processes covering testing, staged rollout, deferrals, restart handling and recovery.

• Address peripheral dependencies, including monitors, printers and docking devices.

• Assess third-party application patching options, considering the client's preference to use its existing Patch My PC solution where supported; evaluate alternatives where required.

Security and compliance

• Work with security stakeholders to assess alignment with the intent of the ASD Essential Eight.

• Identify macOS-specific control gaps, exceptions and practical risk treatments.

• Establish compliance monitoring and assurance evidence.

• Incorporate vulnerability notification, prioritisation and remediation into the operating model.

Technical delivery and transition

• Lead delivery planning across discovery, design, configuration, pilot, rollout and stabilisation.

• Coordinate engineering, support, security and client service desk activities.

• Define pilot success measures, go-live criteria, acceptance evidence and operational readiness requirements.

• Plan deployment activities to minimise user disruption.

• Deliver technical documentation, knowledge transfer and administration handover.

• Support hypercare and transition to ongoing service operations.

ESSENTIAL CAPABILITIES

• Demonstrated enterprise Apple fleet management experience using both Apple Business Manager and Microsoft Intune.

• Strong hands-on macOS architecture, configuration and troubleshooting capability.

• Experience with enrolment, provisioning, configuration profiles, compliance policies and device lifecycle management.

• Experience managing macOS versions, application packaging and deployment, and relevant peripherals.

• Ability to translate security requirements into practical endpoint controls and operational processes.

• Experience leading discovery, pilot deployments, production rollout and service transition.

• Ability to produce clear designs, implementation plans, operating procedures and handover documentation.

• Strong stakeholder communication and technical coordination skills.

DESIRABLE EXPERIENCE

• Essential Eight alignment within a macOS environment.

• Automated remediation, scripting and compliance reporting.

• Third-party application patching and evaluation of update-management options.

• Halo ITSM or comparable service management platforms.

• Endpoint management service delivery in government or similarly governed environments.

EXPECTED DELIVERABLES

• Current-state assessment and agreed technical requirements.

• Future-state architecture and implementation design.

• Configured and tested macOS management environment.

• Pilot, rollout, acceptance and stabilisation evidence.

• Device management, patching, compliance and support procedures.

• Technical documentation, knowledge transfer and operational handover.

APPLICATION INFORMATION

Expressions of interest close 18 November 2026 at 11:59 pm Canberra/Sydney time (AEDT).

Apply through the Azooa Contracts portal with a current CV and a concise summary of relevant macOS, Apple Business Manager, Intune, architecture and technical delivery experience. Include availability and examples of comparable enterprise deployments.

This EOI supports a proposed service engagement. Appointments depend on procurement outcome, client selection and confirmed scope.