Android/iOS Specialist – Enterprise Mobility & Microsoft Intune

Vamonos IT•Ashburn, VA

2d•$110,000 - $150,000•Remote

About The Position

Vamonos IT is seeking an Android/iOS Specialist to support the modernization, migration, and ongoing operation of an enterprise mobile-device environment for a U.S. Federal Agency. The Android/iOS Specialist will serve as a technical subject-matter expert for enterprise Apple iOS/iPadOS and Android devices, with responsibility for device enrollment, configuration, security, application management, troubleshooting, lifecycle management, and operational support. The initial focus of this position will include supporting the migration of enterprise mobile devices from VMware Workspace ONE/AirWatch to Microsoft Intune. Following migration, the specialist will provide ongoing engineering and Tier 3 operational support for the Intune-managed mobile-device environment. This is a hands-on mobile engineering position, not a mobile application development role or general help-desk position.

Requirements

5+ years of experience supporting enterprise mobility, endpoint management, systems administration, or related enterprise IT environments.
Demonstrated hands-on experience managing Apple iOS/iPadOS devices in an enterprise MDM environment.
Demonstrated hands-on experience managing Android Enterprise devices in an enterprise MDM environment.
Hands-on experience administering Microsoft Intune for mobile-device management.
Experience configuring and troubleshooting: Device enrollment, Configuration profiles, Compliance policies, Device restrictions, Managed applications, Mobile security controls.
Experience with enterprise mobile-device provisioning and enrollment technologies.
Experience troubleshooting complex mobile-device enrollment, configuration, authentication, application, and compliance issues.
Experience with Microsoft Entra ID/Azure AD and identity-based access controls.
Experience supporting mobile-device migrations, large-scale deployments, or enterprise endpoint transitions.
Experience providing Tier 2/Tier 3 technical support within a production enterprise environment.
Strong technical documentation and troubleshooting skills.
Ability to operate effectively within structured security, change-management, and production-support processes.
U.S. citizenship and ability to satisfy customer background investigation/suitability requirements.

Nice To Haves

VMware Workspace ONE/AirWatch administration experience.
Direct experience migrating mobile devices from Workspace ONE/AirWatch to Microsoft Intune.
Apple Business Manager and Automated Device Enrollment experience.
Android Enterprise administration experience.
Samsung Knox Mobile Enrollment experience.
Google Zero-Touch Enrollment experience.
Experience with corporate-owned, kiosk/dedicated, and shared-device deployments.
Microsoft Entra Conditional Access and MFA experience.
Mobile Application Management (MAM) / application-protection experience.
PKI, SCEP, certificate lifecycle, PIV/CAC, or derived credential experience.
Mobile threat-defense and endpoint-security experience.
Per-app VPN and mobile DLP experience.
PowerShell, Microsoft Graph API, REST API, or other endpoint-management automation experience.
Splunk/SIEM integration or endpoint security-monitoring experience.
Previous experience supporting federal or other highly regulated environments.
Previous Public Trust or comparable federal suitability investigation.

Responsibilities

Serve as a technical SME for enterprise iOS/iPadOS and Android Enterprise devices.
Support planning, testing, execution, troubleshooting, and validation of mobile-device migration from VMware Workspace ONE/AirWatch to Microsoft Intune.
Configure, administer, and troubleshoot mobile-device enrollment and provisioning.
Configure and support: Apple Business Manager (ABM), Apple Automated Device Enrollment (ADE/DEP), Android Enterprise, Google Zero-Touch Enrollment, Samsung Knox Mobile Enrollment (KME).
Develop, configure, test, and troubleshoot Intune mobile-device: Enrollment profiles, Configuration profiles, Compliance policies, Device restrictions, Security settings, Application assignments, User/device group assignments.
Support corporate-owned, dedicated/kiosk, and shared-device use cases.
Configure and troubleshoot managed mobile applications, including public-store and internally developed applications.
Support application configuration, staged deployments, mandatory/optional assignments, version updates, and application allow/block controls.
Validate device and application functionality following iOS/iPadOS and Android OS releases, security updates, application releases, and policy changes.
Troubleshoot complex mobile-device issues involving enrollment, authentication, application deployment, configuration, connectivity, compliance, and security.
Support integration with Microsoft Entra ID, Conditional Access, MFA, enterprise identity services, and mobile security controls.
Support certificate-based authentication and mobile certificate lifecycle processes, including PKI/SCEP integrations where applicable.
Support mobile security capabilities including device encryption, device attestation, application protection, data-loss-prevention controls, and per-app VPN configurations.
Perform remote device administration and remediation, including lock, wipe, retirement, application removal, and compliance remediation.
Participate in migration pilots and production cutovers and validate device readiness prior to broader deployment.
Provide Tier 3 escalation support for mobile-device incidents and complex user issues.
Create and maintain technical documentation, SOPs, configuration standards, troubleshooting guides, and knowledge-base articles.
Collaborate with endpoint engineering, identity, cybersecurity, networking, application, service desk, and customer teams.