Mobility Architect

Caesars Entertainment•Las Vegas, NV

About The Position

The Mobility Architect is the senior technical authority for enterprise mobility, responsible for defining architecture, standards, security controls, governance, and roadmaps for mobile devices, applications, identity, connectivity, and lifecycle management. The role translates business and security requirements into scalable solutions for corporate-owned, shared, kiosk, dedicated, and personally owned devices. The position provides technical leadership for Microsoft Intune, Apple Business Manager, Android Enterprise, Microsoft Entra ID, Conditional Access, mobile application management, device compliance, mobile threat defense, and related mobility technologies. It partners with Security, Identity, Network, Infrastructure, ServiceNow, Procurement, Legal, application teams, property IT, carriers, manufacturers, and strategic vendors. The architect defines enterprise mobility strategy and target-state designs; leads endpoint management, Apple and Android platform architecture, identity and mobile security, application governance, and mobility modernization; and provides technical direction to engineering and operational teams. The role also evaluates vendors, platforms, devices, and services, and guides complex cross-functional initiatives.

Requirements

At least 10 years of progressively responsible experience in enterprise mobility, endpoint management, infrastructure, security, identity, or related technology disciplines.
At least 5 years designing or governing enterprise MDM and MAM solutions.
Expert-level knowledge of Microsoft Intune architecture, administration, troubleshooting, governance, enrollment, compliance, configuration, application protection, and application deployment.
Advanced experience with Apple Business Manager, Automated Device Enrollment, supervised Apple devices, application distribution, Apple lifecycle management, Android Enterprise, and zero-touch enrollment.
Strong experience with Microsoft Entra ID, Conditional Access, multifactor authentication, device identity, registration, compliance, role-based access control, mobile threat defense, and enterprise data protection.
Experience with IBM MaaS360 MDM Platform.
Experience designing solutions for corporate-owned, BYOD, shared, kiosk, dedicated, frontline, rugged, and specialty-device scenarios.
Experience with certificate-based authentication, enterprise Wi-Fi, VPN, mobile connectivity, Microsoft 365 mobile access, ServiceNow, asset management, reporting, and security integrations.
Demonstrated success developing architecture diagrams, technical standards, roadmaps, governance documentation, executive presentations, and leading complex cross-functional enterprise initiatives.
Strong communication, facilitation, stakeholder-management, vendor-management, risk analysis, and decision-making skills in a large, geographically distributed enterprise.
Bachelor’s degree in computer science, information systems, cybersecurity, engineering, business, or a related field, or an equivalent combination of education and relevant professional experience.

Nice To Haves

Hospitality, entertainment, retail, or regulated-industry experience is preferred.
A master’s degree is preferred.
Preferred certifications include Microsoft 365 Certified: Endpoint Administrator Associate, Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Cybersecurity Architect Expert, Apple deployment and management training, ITIL Foundation, CISSP, or CCSP.

Responsibilities

Define and maintain the enterprise mobility strategy, target-state architecture, reference designs, technical standards, and multiyear roadmap.
Design scalable enrollment, provisioning, configuration, application delivery, compliance, access, replacement, recovery, and retirement patterns.
Evaluate emerging platforms, devices, security capabilities, and industry trends; identify architectural risks, technical debt, and consolidation opportunities.
Create solution designs, architecture diagrams, decision records, implementation guidance, and operational requirements aligned with enterprise security, privacy, legal, and regulatory standards.
Provide expert-level architecture and technical leadership for Microsoft Intune mobile device management and mobile application management.
Design Intune enrollment, compliance, configuration, application protection and deployment, certificates, Wi-Fi, VPN, device restrictions, and zero-touch provisioning.
Define management models for corporate-owned, BYOD, shared, kiosk, frontline, and specialty devices across iOS, iPadOS, Android, and supported mobile platforms.
Govern enrollment restrictions, assignment filters, dynamic groups, device categories, scope tags, role-based access control, naming, testing, change control, and production deployment.
Guide engineering teams through complex enrollment, compliance, authentication, application, connectivity, and policy-assignment issues.
Lead Apple Business Manager architecture and integration with Intune, including Automated Device Enrollment, supervision, enrollment profiles, tokens, application distribution, and device assignment.
Establish controls for procurement, reseller registration, provisioning, replacement, reassignment, repair, return, loss, theft, and retirement of Apple devices.
Define Android Enterprise architecture for fully managed, dedicated, corporate-owned work profile, personal work profile, and zero-touch enrollment scenarios.
Establish supported device, operating system, security update, hardware, accessory, rugged device, scanner, tablet, and kiosk standards.
Design integrations with Microsoft Entra ID, Conditional Access, multifactor authentication, certificate services, identity providers, and enterprise applications.
Define device registration, enrollment, ownership, compliance, authentication, and access-control patterns for corporate and BYOD scenarios.
Design Conditional Access and application protection controls using compliance, approved applications, authentication strength, platform, risk, encryption, data transfer, backup, local storage, and selective wipe requirements.
Integrate mobile threat defense and define controls for lost, stolen, compromised, noncompliant, jailbroken, rooted, or unsupported devices.
Establish architecture for certificates, enterprise Wi-Fi, always-on VPN, per-application VPN, secure web access, and mobile connectivity; support risk assessments, audits, incident response, and remediation.
Define standards for public, internal, line-of-business, web, and managed applications, including configuration, authentication, data protection, deployment, updates, and retirement.
Establish mobility policies, architecture guardrails, technical review and approval processes, exception management, testing, pilot, rollback, documentation, and operational handoff requirements.
Provide technical direction, mentoring, and escalation support to mobility engineers, administrators, service desk teams, property IT, project teams, and vendors.
Develop metrics for compliance, security, adoption, service health, performance, and device lifecycle; communicate technical decisions to engineering teams, business stakeholders, and senior leadership.
Lead architecture workstreams for mobility modernization, MDM migration, device deployment, security, identity, application, and lifecycle initiatives.
Define project requirements, dependencies, risks, acceptance criteria, implementation standards, and architecture guidance for refreshes, platform changes, mergers, acquisitions, property openings, and business expansion.
Review solution proposals, statements of work, vendor designs, services, and deliverables for alignment with enterprise architecture and financial objectives.
Evaluate wireless carriers, device manufacturers, security providers, managed services, platforms, licenses, devices, and support models; support cost-benefit and investment decisions.