Mobility Engineer

Agile Defense•Ashburn, VA

1d•Hybrid

About The Position

Agile Defense is seeking a Mobility Engineer to support the Department of Homeland Security (DHS) mission and enterprise mobile device management (MDM) infrastructure. The role focuses on designing, deploying, securing, and managing enterprise endpoint management infrastructure using VMware Workspace ONE and Microsoft Intune. The engineer will help optimize mobile and desktop user experiences across iOS, Android, macOS, and Windows, working with IT security, NOC, IT infrastructure, and ServiceDesk teams to maintain secure access to corporate resources and efficient operations. The position is based in Ashburn, Virginia, with a hybrid schedule requiring 2–3 days per week onsite. The employee must be able to obtain CBP BI clearance.

Requirements

At least 5 years of relevant experience.
Senior-level expertise designing, deploying, configuring, and managing on-premise VMware Workspace ONE UEM.
Experience with Workspace ONE UEM components, including Device Services, the Admin Console, ACC, and backend database integrations.
Experience deploying, configuring, and maintaining Unified Access Gateways (UAG).
Proven experience planning, testing, and executing complex Workspace ONE UEM upgrades, migrations, and patch deployments.
Expertise in enterprise application deployment strategies and lifecycle management using Workspace ONE UEM.
Advanced troubleshooting skills for on-premise architecture, gateway-related issues, system logs, and escalated endpoint management problems.
Experience maintaining, patching, and administering Windows Server 2022 environments.
Experience applying security hardening baselines such as DISA STIGs or CIS benchmarks, monitoring event logs, and remediating vulnerabilities.
Strong communication skills and ability to collaborate with security teams, system administrators, and agency stakeholders.
Must be able to obtain CBP BI clearance.

Responsibilities

Design, deploy, configure, and manage on-premise VMware Workspace ONE UEM, including Device Services, the Admin Console, ACC, and backend database integrations.
Deploy, configure, and maintain Unified Access Gateways (UAG) to secure edge traffic and enable Per-App VPN, secure tunneling, and proxy services.
Plan, test, and execute Workspace ONE UEM version upgrades, migrations, and patch deployments with minimal operational disruption.
Manage enterprise application deployment and lifecycle management through Workspace ONE UEM.
Diagnose on-premise architecture and gateway issues, analyze system logs, and resolve escalated endpoint management problems.
Maintain, patch, and administer the Windows Server 2022 compute environment hosting the on-premise UEM architecture.
Apply security hardening baselines, monitor event logs, and remediate vulnerabilities across Windows server infrastructure.
Collaborate with IT security, system administrators, NOC, IT infrastructure, ServiceDesk teams, and agency stakeholders to support secure and efficient operations.