Mobility Architect

Caesars Entertainment•Las Vegas, NV

About The Position

The Mobility Architect is the senior technical authority for enterprise mobility, responsible for defining architecture, standards, security controls, governance, and roadmaps for mobile devices, applications, identity, connectivity, and lifecycle management. The role translates business and security requirements into scalable solutions for corporate-owned, shared, kiosk, dedicated, and personally owned devices. It provides technical leadership across Microsoft Intune, Apple Business Manager, Android Enterprise, Microsoft Entra ID, Conditional Access, mobile application management, device compliance, mobile threat defense, and related mobility technologies. The architect partners with Security, Identity, Network, Infrastructure, ServiceNow, Procurement, Legal, application teams, property IT, carriers, manufacturers, and strategic vendors. The role also leads architecture workstreams and cross-functional initiatives, guides technical teams, evaluates vendor and platform options, and communicates architectural decisions to engineering teams, business stakeholders, and senior leadership.

Requirements

Ten or more years of progressively responsible experience in enterprise mobility, endpoint management, infrastructure, security, identity, or related technology disciplines.
Five or more years designing or governing enterprise MDM and MAM solutions.
Expert-level knowledge of Microsoft Intune architecture, administration, troubleshooting, governance, enrollment, compliance, configuration, application protection, and application deployment.
Advanced experience with Apple Business Manager, Automated Device Enrollment, supervised Apple devices, application distribution, Apple lifecycle management, Android Enterprise, and zero-touch enrollment.
Strong experience with Microsoft Entra ID, Conditional Access, multifactor authentication, device identity, registration, compliance, role-based access control, mobile threat defense, and enterprise data protection.
Experience with IBM MaaS360 MDM Platform.
Experience designing solutions for corporate-owned, BYOD, shared, kiosk, dedicated, frontline, rugged, and specialty-device scenarios.
Experience with certificate-based authentication, enterprise Wi-Fi, VPN, mobile connectivity, Microsoft 365 mobile access, ServiceNow, asset management, reporting, and security integrations.
Demonstrated success developing architecture diagrams, technical standards, roadmaps, governance documentation, and executive presentations, and leading complex cross-functional enterprise initiatives.
Strong communication, facilitation, stakeholder-management, vendor-management, risk-analysis, and decision-making skills in a large, geographically distributed enterprise.
Bachelor’s degree in computer science, information systems, cybersecurity, engineering, business, or a related field, or an equivalent combination of education and relevant professional experience.

Nice To Haves

Hospitality, entertainment, retail, or regulated-industry experience.
A master’s degree.
Microsoft 365 Certified: Endpoint Administrator Associate certification.
Microsoft Certified: Identity and Access Administrator Associate certification.
Microsoft Certified: Cybersecurity Architect Expert certification.
Apple deployment and management training.
ITIL Foundation certification.
CISSP certification.
CCSP certification.

Responsibilities

Define and maintain enterprise mobility strategy, target-state architecture, reference designs, technical standards, and multiyear roadmaps.
Design scalable enrollment, provisioning, configuration, application delivery, compliance, access, replacement, recovery, and retirement patterns.
Evaluate platforms, devices, security capabilities, and industry trends; identify architectural risks, technical debt, and consolidation opportunities.
Create solution designs, architecture diagrams, decision records, implementation guidance, and operational requirements aligned with enterprise security, privacy, legal, and regulatory standards.
Provide architecture and technical leadership for Microsoft Intune mobile device management and mobile application management.
Design Intune enrollment, compliance, configuration, application protection and deployment, certificates, Wi-Fi, VPN, device restrictions, and zero-touch provisioning.
Define management models for corporate-owned, BYOD, shared, kiosk, frontline, and specialty devices across iOS, iPadOS, Android, and supported mobile platforms.
Govern enrollment restrictions, assignment filters, dynamic groups, device categories, scope tags, role-based access control, naming, testing, change control, and production deployment.
Guide engineering teams through complex enrollment, compliance, authentication, application, connectivity, and policy-assignment issues.
Lead Apple Business Manager architecture and integration with Intune, including Automated Device Enrollment, supervision, enrollment profiles, tokens, application distribution, and device assignment.
Establish Apple device controls for procurement, reseller registration, provisioning, replacement, reassignment, repair, return, loss, theft, and retirement.
Define Android Enterprise architecture for fully managed, dedicated, corporate-owned work profile, personal work profile, and zero-touch enrollment scenarios.
Establish supported device, operating system, security update, hardware, accessory, rugged device, scanner, tablet, and kiosk standards.
Design integrations with Microsoft Entra ID, Conditional Access, multifactor authentication, certificate services, identity providers, and enterprise applications.
Define device registration, enrollment, ownership, compliance, authentication, and access-control patterns for corporate and BYOD scenarios.
Design Conditional Access and application protection controls based on compliance, approved applications, authentication strength, platform, risk, encryption, data transfer, backup, local storage, and selective wipe requirements.
Integrate mobile threat defense and define controls for lost, stolen, compromised, noncompliant, jailbroken, rooted, or unsupported devices.
Establish architecture for certificates, enterprise Wi-Fi, always-on VPN, per-application VPN, secure web access, and mobile connectivity; support risk assessments, audits, incident response, and remediation.
Define standards for public, internal, line-of-business, web, and managed applications, including configuration, authentication, data protection, deployment, updates, and retirement.
Establish mobility policies, architecture guardrails, technical review and approval processes, exception management, testing, pilots, rollback, documentation, and operational handoff requirements.
Provide technical direction, mentoring, and escalation support to mobility engineers, administrators, service desk teams, property IT, project teams, and vendors.
Develop metrics for compliance, security, adoption, service health, performance, and device lifecycle; communicate technical decisions to technical teams, business stakeholders, and senior leadership.
Lead architecture workstreams for mobility modernization, MDM migration, device deployment, security, identity, application, and lifecycle initiatives.
Define project requirements, dependencies, risks, acceptance criteria, implementation standards, and architecture guidance for refreshes, platform changes, mergers, acquisitions, property openings, and business expansion.
Review solution proposals, statements of work, vendor designs, services, and deliverables for alignment with enterprise architecture and financial objectives.
Evaluate wireless carriers, device manufacturers, security providers, managed services, platforms, licenses, devices, and support models; support cost-benefit and investment decisions.