ROLE OVERVIEW

Azooa is seeking expressions of interest from an experienced macOS endpoint architect and engineer to lead the design and implementation of a proposed enterprise macOS management uplift for the National Museum of Australia.

The engagement will improve reliability, security and maintainability using Apple Business Manager and Microsoft Intune, and establish a sustainable operating model for ongoing device management and Level 2 and Level 3 support. This hands-on technical leadership role combines architecture, engineering and delivery coordination from discovery through to business-as-usual handover.

ENGAGEMENT DETAILS

- Location: Canberra, ACT.
- Working arrangement: hybrid, with onsite attendance as required. Attendance and service coverage will be agreed with the client.
- Proposed contract opportunity, subject to procurement outcome, client selection and confirmed scope.
- Indicative project commencement: 30 November 2026.
- Service term: initial 12 months, with two possible 12-month extensions, subject to approval. Individual allocation and duration will depend on the agreed delivery model.

KEY RESPONSIBILITIES

Discovery and solution architecture

- Assess the existing macOS environment, management configuration, operational processes and support dependencies.
- Confirm scope, requirements, assumptions, constraints, risks and responsibilities with client stakeholders.
- Design the future-state macOS management architecture using Apple Business Manager and Microsoft Intune.
- Define enrolment, onboarding, provisioning, configuration, compliance, application delivery and device lifecycle processes.
- Develop an operating model covering administration, support ownership, escalation and service desk integration.
- Document design decisions, dependencies and implementation requirements.

Endpoint engineering and implementation

- Configure Apple Business Manager and Intune integration, including Automated Device Enrolment where applicable.




- Implement standard configuration baselines, configuration profiles, compliance policies and reporting.
- Establish application packaging, deployment and version-management processes.
- Implement macOS upgrade and security-update processes covering testing, staged rollout, deferrals, restart handling and recovery.
- Address peripheral dependencies, including monitors, printers and docking devices.
- Assess third-party application patching options, considering the client's preference to use its existing Patch My PC solution where supported; evaluate alternatives where required.

Security and compliance

- Work with security stakeholders to assess alignment with the intent of the ASD Essential Eight.
- Identify macOS-specific control gaps, exceptions and practical risk treatments.
- Establish compliance monitoring and assurance evidence.
- Incorporate vulnerability notification, prioritisation and remediation into the operating model.

Technical delivery and transition

- Lead delivery planning across discovery, design, configuration, pilot, rollout and stabilisation.
- Coordinate engineering, support, security and client service desk activities.
- Define pilot success measures, go-live criteria, acceptance evidence and operational readiness requirements.
- Plan deployment activities to minimise user disruption.
- Deliver technical documentation, knowledge transfer and administration handover.
- Support hypercare and transition to ongoing service operations.

ESSENTIAL CAPABILITIES

- Demonstrated enterprise Apple fleet management experience using both Apple Business Manager and Microsoft Intune.




- Strong hands-on macOS architecture, configuration and troubleshooting capability.
- Experience with enrolment, provisioning, configuration profiles, compliance policies and device lifecycle management.
- Experience managing macOS versions, application packaging and deployment, and relevant peripherals.
- Ability to translate security requirements into practical endpoint controls and operational processes.
- Experience leading discovery, pilot deployments, production rollout and service transition.
- Ability to produce clear designs, implementation plans, operating procedures and handover documentation.
- Strong stakeholder communication and technical coordination skills.

DESIRABLE EXPERIENCE

- Essential Eight alignment within a macOS environment.
- Automated remediation, scripting and compliance reporting.
- Third-party application patching and evaluation of update-management options.
- Halo ITSM or comparable service management platforms.
- Endpoint management service delivery in government or similarly governed environments.

EXPECTED DELIVERABLES

- Current-state assessment and agreed technical requirements.
- Future-state architecture and implementation design.
- Configured and tested macOS management setting.
- Pilot, rollout, acceptance and stabilisation evidence.
- Device management, patching, compliance and support procedures.
- Technical documentation, knowledge transfer and operational handover.

APPLICATION INFORMATION

Expressions of interest close 18 November 2026 at 11:59 pm Canberra/Sydney time (AEDT).

Apply through the Azooa Contracts portal with a current CV and a concise summary of relevant macOS, Apple Business Manager, Intune, architecture and technical delivery experience. Include availability and examples of comparable enterprise deployments.

This EOI supports a proposed service engagement. Appointments depend on procurement outcome, client selection and confirmed scope.

📌 Lead macOS / Endpoint Architect & Engineer (Canberra)
🏢 Azooa
📍 Canberra