Infrastructure as Code with Jamf: Terraform for Repeatable Mac Management #JNUC2025

Description

Automate Jamf Pro deployment with infrastructure as code using Terraform and GitHub Actions. Shane Brown and Ryan Legg (Jamf Sales Engineers) alongside Javier Robles and Anthony Telljohann (Vanguard DevOps) demonstrate how Terraform providers enable version-controlled, repeatable, testable Mac fleet management. Learn Jamf Onboarder for new instances, GitHub modules for experienced admins, and Vanguard's reusable application components with Atmos. Results: 33% more changes deployed, 43% fewer incidents, 418% more vulnerabilities closed. What you'll learn: ► What is infrastructure as code and why it matters for Apple device management ► Terraform vs API scripts: lower maintenance, community-supported providers ► Jamf Onboarder: automated setup for new customers with compliance benchmarks ► GitHub modules for Jamf Pro: CIS policies, config profiles, Mac apps, smart groups ► Vanguard case study: 25% of resources managed via Terraform in 5.5 months ► Building reusable application components with Atmos and YAML ► Import strategies: priorities-based vs everything-at-once (don't do this) ► Version control benefits: tracking changes, rollback safety, team collaboration ► GitOps workflows: branches, pull requests, automated formatting/linting ► Measuring success: more changes, fewer incidents, happier engineers 0:00 Introduction: Infrastructure as Code with Jamf 1:37 What is Infrastructure as Code? Testable, Repeatable, Scalable 3:15 Evolution: GUI (Click Ops) → API Scripts → Terraform Providers 5:14 Jamf Onboarder: Automated Setup for New Customers 7:36 GitHub Modules: Backing Onboarder for Experienced Admins 9:19 Live Demo: Terraform Apply Creating 63 Resources (Policies, Profiles, Apps, Smart Groups) 12:06 Vanguard Case Study: 20,000 Crew, 3,200 Macs, 115% Growth in One Year 14:09 Why Vanguard Chose Terraform: Version Control, Resilience, Repeatability, Automation 17:09 Vanguard Results: 33% More Changes, 43% Fewer Incidents, 418% More Vulnerabilities Closed 18:03 Gotchas: Environment Inconsistencies, Import Strategies, Rollback Safety, Reusable Components 25:06 Getting Started: Deployment Theory Provider, Jamf Security Provider, GitHub Modules 27:55 Q&A: Git Branches, Open Source, Provider Updates, Environment Consistency, CI/CD Workflows Who this video is for: ► Mac administrators seeking repeatable deployment workflows ► DevOps engineers managing Jamf Pro with version control ► IT operations teams scaling Mac fleets rapidly ► Security teams enforcing compliance benchmarks consistently ► Multi-environment administrators (dev, staging, production) #mobiledevicemanagement #infrastructureascode #deployment #itmanagement #terraform