I use Murus to manage pf on a couple of Macs. They also have an application-layer firewall named Vallum. https://www.murusfirewall.com