How to mass-deploy a root certificate in a corporate environment

Our Windows administrator deploys a root CA certificate to all the machines through [Group Policies](https://en.wikipedia.org/wiki/Group_Policy) , which works very well in a corporate setting. Is there something similar to this we can use for our Apple devices? Currently we are manually installing the root certificate on every Mac machine when there is an update or we purchase a new machine.