Systems Administrator | macOS/iOS | Junior-Mid

The world’s most advanced VPN, and a whole lot more.

If you’re a curious problem-solver who carves their own path, join the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet—tools that put privacy, security, and control back in people’s hands.

Your impact? Helping millions take back control of their online security, privacy, and data.

Main Responsibilities

Manage the full lifecycle of macOS/iOS devices — from deployment to retirement — including scripting and automations that make device management run itself;

Keep our fleet secure and compliant — administer identity and access integrations (JumpCloud, Okta, Google Workspace), apply hardening best practices, and help align device infrastructure with business and security goals;

Be the go-to person for macOS/iOS challenges, working with security, IT, and engineering teams to improve endpoint workflows — we have plenty of ideas, and we want yours.

Manage and administer various systems in our scope and their connections — from identity providers to SaaS tooling and the integrations between them;

Core Requirements

Device management experience: ~1 year administering macOS devices in a business environment, with solid understanding of system architecture and built-in security features;

Scripting: Bash/Zsh skills you’ve actually used in production, not just in tutorials;

MDM: hands-on experience with an MDM platform (JumpCloud, Jamf, Iru (Kandji), Mosyle, Intune or similar counts too), including creating and deploying Configuration Profiles;

Systems & identity: experience administering SaaS systems and familiarity with identity and access management concepts and at least one IdP;

You as a teammate: a friendly, helpful attitude, strong communication skills, and good written and spoken English.

Bonus Points For

Python, Swift, or workflow automation tools ;

API integrations between identity, security, and management systems;

Software deployment and packaging (Munki, AutoPkg, or similar);

Google Workspace administration, IDP administration, Windows/Linux endpoint management, or networking and VPN fundamentals.

We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance.

By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter.

If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at privacy@nordaccount.com. Should you prefer to opt out of the automated evaluation, please submit your application directly to career@nordsec.com.