Mobility Architect

Job Title: Mobility Architec

Location: Hybrid - 2 days a week on-site - Suitland, MD

Salary: 190K-265K

Summary

The Mobility Architect is responsible for designing, defining, and governing the end-to-end enterprise mobility strategy and architecture. This role bridges high-level business requirements with technical execution, focusing on secure device lifecycle management, mobile device management (MDM) / unified endpoint management (UEM) integrations, mobile application management (MAM), identity and access management (IAM), and zero-trust security postures across iOS, Android, and other mobile operating systems.

Key Responsibilities

• Strategic Architecture & Roadmapping: Design scalable, secure, and future-proof enterprise mobility frameworks that align with organizational goals and cloud-first security mandates.
• Solution Design: Lead the architectural design of enterprise MDM/UEM platforms (e.g., Microsoft Intune, Workspace ONE) alongside related ecosystems such as mobile threat defense (MTD), identity providers (Azure AD/Entra ID), and Public Key Infrastructure (PKI).
• Security & Compliance Governance: Ensure all mobile solutions comply with federal, state, or industry security frameworks (e.g., NIST, FedRAMP, HIPAA) by integrating robust encryption, conditional access policies, and data loss prevention (DLP) controls.
• Cross-Functional Collaboration: Partner with network engineers, security architects, cloud teams, and application developers to integrate mobile services cleanly into existing IT infrastructure.
• Technical Leadership: Guide engineering teams through the implementation of complex deployment models (BYOD, COPE, COBO) and resolve high-tier architectural challenges.

Required Qualifications & Skills

• Experience: 8+ years of IT experience, with at least 4–5 years specializing in enterprise mobility architecture and endpoint management design.
• Core Technical Expertise:
• Deep mastery of enterprise UEM/MDM platforms (Microsoft Intune, VMware Workspace ONE, MobileIron/Ivanti).
• Comprehensive understanding of mobile operating systems (Apple iOS/iPadOS, Android Enterprise, Windows 11 mobile).
• Familiarity with Mobile Threat Defense (MTD), Virtual Private Networks (VPN), secure tunnels, and Per-App VPN configurations.
• Identity & Security Integration: Strong experience integrating mobile architectures with modern identity frameworks (OAuth, SAML, OpenID Connect, Conditional Access, Multi-Factor Authentication).
• Certifications: Industry certifications such as TOGAF, Microsoft Certified: Identity and Access Administrator Associate, or OEM-specific mobility expert certifications are highly preferred.
• Education: Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field (or equivalent professional experience).

Mobility Platform SME

Role Summary

The Mobility Platform SME serves as the operational and technical authority for day-to-day and advanced platform engineering within the enterprise mobility ecosystem. While the Architect focuses on high-level design, the Platform SME is hands-on with configuration, administration, lifecycle maintenance, troubleshooting, and optimization of the core UEM/MDM platforms and associated device-management pipelines.

Key Responsibilities

• Platform Administration & Engineering: Configure, maintain, and optimize enterprise mobility platforms (e.g., Microsoft Intune, customized MDM environments), handling profile configurations, compliance policies, and application packaging/deployment.
• Troubleshooting & Tier-3 Support: Resolve complex, escalated technical issues related to mobile device enrollment, connectivity failures, app distribution errors, and OS upgrade compatibility.
• Automation & Scripting: Develop scripts (PowerShell, Graph API, Python) to automate routine administrative tasks, device reporting, compliance checks, and provisioning workflows.
• Patch & Lifecycle Management: Monitor and manage OS version rollouts, security patches, and application updates across the enterprise mobile fleet to minimize disruption and maintain compliance.
• Documentation & Training: Create comprehensive operational runbooks, technical documentation, and knowledge-transfer materials for helpdesk and tier-1/tier-2 support teams.

Required Qualifications & Skills

• Experience: 5+ years of hands-on IT experience with a heavy focus on device engineering, platform administration, and mobile device management.
• Core Technical Expertise:
• Advanced, hands-on administration experience with UEM tools (especially Microsoft Intune / Endpoint Manager or specialized agency MDM solutions).
• Expert knowledge of Apple Automated Device Enrollment (formerly DEP), Apple Volume Purchase Program (VPP), and Android Enterprise management setups.
• Experience with app wrapping, mobile application management (MAM), and enterprise app store integration.
• Scripting & Automation: Proficiency in PowerShell, Microsoft Graph API, or Bash for automating administrative tasks and system integrations.
• Problem-Solving & Diagnostics: Strong analytical mindset with the ability to troubleshoot deep-seated device-to-cloud telemetry issues, certificate errors, and policy deployment failures.
• Education/Certifications: Relevant platform certifications (e.g., Microsoft 365 Certified: Endpoint Administrator Associate) and a degree in Information Technology or a related technical discipline.