Key Responsibilities

Architecture & Standards

·       Own UEM/Access architecture,configuration baselines, and hardening guidelines for multi‑OS endpoints.

·       Design device on-boarding flows(corporate and BYOD), group structures, profile strategy, and lifecycle states.

·       Define and maintain documentation: solution design, SOPs/runbooks, and knowledge articles.

Platform Operations (L3)

·       Lead L3 incident/problem management: deep diagnosis, RCA, Proactive Problem Management, permanent fixes,and post‑incident actions.

·       Plan and execute upgrades/patching for UEM components (Console, Device Services, DB), UAG, and Workspace ONE Access; manage certificate/keys life‑cycle (APNS, TLS, app signing).

·       Monitor service health and capacity; tune compliance policies, remediation actions, and deployment rings.Maintain and  Publish Proactive Health-check reports across MDM Infrastructure [Such as ACC, UAG, Tunnel Services,Bulk Synch and so on ]

·       Design and Define Delivery Optimization and other industry best practices for Mass deployment of Packages / Patches without disruption of operations and network bandwidth

Enrollment & App/Policy Delivery

·       Govern Workspace One and Android Enterprise integrations.

·       Orchestrate profiles,compliance rules, per‑app VPN/Tunnel, SDK/Proxy settings, and device trust.

·       Drive app packaging, staging,and ring‑based rollouts; implement rollback and safety nets.

Security & Identity

·       Integrate Workspace ONE Access/IDP for SSO /MFA journeys; ensure conditional access and device posture checks.

·       Coordinate with end point security (EDR) and vulnerability management to remediate risks at scale.

·       Maintain certificate chains and automate renewals with zero service disruption.

Automation & Analytics

·       Automate jobs (smart groups,scripts, APIs), build telemetry and DEX dashboards for experience KPIs.

·       Implement auto‑heal playbooks for common failure patterns (enrollment, agent, policy, network).

·       Configure required Sensors in Workspace One for deployment, Post Deployment validations and other purposes

Service Management & Governance

·       Operate within ITIL processes(Incident/Change/Problem); prepare CAB artefacts (plan, test, rollback,maker‑checker).

·       Publish weekly/monthly compliance, enrollment, patch currency, and deployment success reports.

·       Vendor liaison(Omnissa/Apple/Google/Microsoft) for escalations, hotfixes, and release readiness.

Mandatory Skills & Experience

·       9–12+ years in EUC/MDM with 4+years hands‑on Workspace ONE UEM (profiles, compliance, app lifecycle,scripting/automation).

·       Proven experience with UAG design/operations (HA, upgrades, Tunnel/per‑app VPN) and Workspace ONE Access/VIDM.

·       APNS and enterprise app signing; certificate/PKI management.

·       Cross‑platform endpoint management (Windows 11, macOS, iOS/iPadOS, Android/BYOD), OS patching at scale.

·       Strong troubleshooting/RCA skills; excellent documentation and stakeholder communication.

·       ITSM tooling (e.g., Service Now)and disciplined change management.

Good‑to‑Have

·       Exposure to Intune/JAMF and identity/PKI stacks.

·       Scripting (PowerShell/bash),REST APIs for Workspace ONE; report automation (Power BI/Tableau).

·       Experience with DEX/end pointanalytics tools.

Certifications (Preferred)

·       Omnissa/VMware Workspace ONE Associate/Professional

·       ITIL 4; ServiceNow CSA/CIS