Mobility Architect | Req#4746

Job Title:

Mobility Architec Location:

Hybrid - 2 days a week on-site -

Suitland, MD Salary:

190K-265K Summary The Mobility Architect is responsible for designing, defining, and governing the end-to-end enterprise mobility strategy and architecture. This role bridges high-level business requirements with technical execution, focusing on secure device lifecycle management, mobile device management (MDM) / unified endpoint management (UEM) integrations, mobile application management (MAM), identity and access management (IAM), and zero-trust security postures across iOS, Android, and other mobile operating systems. Key Responsibilities

Strategic Architecture & Roadmapping:

Design scalable, secure, and future-proof enterprise mobility frameworks that align with organizational goals and cloud-first security mandates.

Solution Design:

Lead the architectural design of enterprise MDM/UEM platforms (e.g., Microsoft Intune, Workspace ONE) alongside related ecosystems such as mobile threat defense (MTD), identity providers (Azure AD/Entra ID), and Public Key Infrastructure (PKI).

Security & Compliance Governance:

Ensure all mobile solutions comply with federal, state, or industry security frameworks (e.g., NIST, Fed

RAMP, HIPAA

) by integrating robust encryption, conditional access policies, and data loss prevention (DLP) controls.

Cross-Functional Collaboration:

Partner with network engineers, security architects, cloud teams, and application developers to integrate mobile services cleanly into existing IT infrastructure.

Technical Leadership:

Guide engineering teams through the implementation of complex deployment models (BYOD, COPE, COBO) and resolve high-tier architectural challenges.

Required Qualifications & Skills

Experience:

8+ years of IT experience, with at least 4-5 years specializing in enterprise mobility architecture and endpoint management design.

Core Technical Expertise:

• Deep mastery of enterprise UEM/MDM platforms (Microsoft Intune, VMware Workspace ONE, MobileIron/Ivanti).
• Comprehensive understanding of mobile operating systems (Apple iOS/iPadOS, Android Enterprise, Windows 11 mobile).
• Familiarity with Mobile Threat Defense (MTD), Virtual Private Networks (VPN), secure tunnels, and Per-App VPN configurations.

Identity & Security Integration:

Strong experience integrating mobile architectures with modern identity frameworks (OAuth, SAML, OpenID Connect, Conditional Access, Multi-Factor Authentication).

Certifications:

Industry certifications such as

TOGAF, Microsoft Certified:

Identity and Access Administrator Associate, or OEM-specific mobility expert certifications are highly preferred.

Education:

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field (or equivalent professional experience). Mobility Platform SME Role Summary The Mobility Platform SME serves as the operational and technical authority for day-to-day and advanced platform engineering within the enterprise mobility ecosystem. While the Architect focuses on high-level design, the Platform SME is hands-on with configuration, administration, lifecycle maintenance, troubleshooting, and optimization of the core UEM/MDM platforms and associated device-management pipelines. Key Responsibilities

Platform Administration & Engineering:

Configure, maintain, and optimize enterprise mobility platforms (e.g., Microsoft Intune, customized MDM environments), handling profile configurations, compliance policies, and application packaging/deployment.

• Troubleshooting & Tier-3

Support:

Resolve complex, escalated technical issues related to mobile device enrollment, connectivity failures, app distribution errors, and OS upgrade compatibility.

Automation & Scripting:

Develop scripts (PowerShell, Graph API, Python) to automate routine administrative tasks, device reporting, compliance checks, and provisioning workflows.

Patch & Lifecycle Management:

Monitor and manage OS version rollouts, security patches, and application updates across the enterprise mobile fleet to minimize disruption and maintain compliance.

Documentation & Training:

Create comprehensive operational runbooks, technical documentation, and knowledge-transfer materials for helpdesk and tier-1/tier-2 support teams. Required Qualifications & Skills

Experience:

5+ years of hands-on IT experience with a heavy focus on device engineering, platform administration, and mobile device management.

Core Technical Expertise:

• Advanced, hands-on administration experience with UEM tools (especially Microsoft Intune / Endpoint Manager or specialized agency MDM solutions).
• Expert knowledge of Apple Automated Device Enrollment (formerly DEP), Apple Volume Purchase Program (VPP), and Android Enterprise management setups.
• Experience with app wrapping, mobile application management (MAM), and enterprise app store integration.

Scripting & Automation:

Proficiency in PowerShell, Microsoft Graph API, or Bash for automating administrative tasks and system integrations.

Problem-Solving & Diagnostics:

Strong analytical mindset with the ability to troubleshoot deep-seated device-to-cloud telemetry issues, certificate errors, and policy deployment failures.

Education/Certifications:

Relevant platform certifications (e.g., Microsoft 365

Certified:

Endpoint Administrator Associate) and a degree in Information Technology or a related technical discipline.

Core Capabilities:

• Advanced and Managed IT Services
• Agile Software Development
• DevSecOps
• Cybersecurity
• Health IT

C4ISR & SIGINT

• Data Center Engineering & Operations
• Engineering & Installation Why ActioNet?

At ActioNet, our Passion for Quality is at the...Visit the Employer site for more details