Workspace ONE Technical Consultant – Level 2

Number of positions: 3
Employment type: Full-time
Experience: 5–8 years

Role

Mobility / Workspace ONE Technical Consultant

Responsibilities

• Design and implement end-to-end Unified Endpoint Management (UEM) architecture using Omnissa Workspace ONE, including multi-region and high-availability setups.
• Lead complex migrations, such as from legacy MDM or Microsoft Intune to Workspace ONE, with minimal downtime and user impact.
• Architect and implement Zero Trust security frameworks using Workspace ONE Access, conditional access, and device compliance.
• Troubleshoot device enrollment, application deployment, certificate issues, and identity integrations.
• Design and maintain scalable ACC (AirWatch Cloud Connector) architecture, including Kerberos, LDAP, and enterprise directory integrations.
• Integrate Workspace ONE with identity providers such as Okta, Ping Identity, and Azure AD for SSO and federation.
• Implement and optimize Workspace ONE Tunnel, Content Gateway, and Secure Email Gateway (SEG) for secure enterprise access.
• Automate bulk device and user management, Smart Groups, and reporting using REST APIs, PowerShell, and scripting.
• Design compliance and remediation frameworks, including automated actions based on device posture.
• Lead performance tuning and environment health checks for large-scale deployments.
• Conduct security audits and harden systems in line with enterprise security standards and compliance frameworks.
• Set up, configure, and install Workspace ONE UEM and Workspace ONE Access.
• Configure enrollment for Apple iOS, macOS, Android, and Windows devices, and manage enrollment and organization group assignments.
• Configure enhanced management settings, including profiles, policies, and system settings; configure Android Enterprise and Apple Business Manager (ABM).

Skills and experience

• Expert-level knowledge of Workspace ONE UEM architecture components, including Console, Device Services, API, ACC, and database.
• Strong experience with certificate-based authentication, including SCEP, PKI, and CA integration.
• Deep understanding of identity and access management concepts, including SAML, OAuth, and OIDC.
• Hands-on experience with Zero Trust and Conditional Access policies in Azure AD and Workspace ONE.
• Advanced troubleshooting experience with Android Enterprise (Work Profile, COPE, Fully Managed) and Apple DEP/ABM integrations.
• Experience with Workspace ONE Intelligence for automation, reporting, and analytics.
• Expertise in application lifecycle management for Win32, macOS packages, mobile apps, and internal apps.
• Knowledge of networking concepts, including DNS, load balancers, reverse proxies, and SSL offloading.
• Familiarity with enterprise mobility security controls, data loss prevention (DLP), and compliance frameworks.
• Strong scripting and automation skills, including PowerShell, REST APIs, and JSON.
• At least 4 years of professional experience with Omnissa Workspace ONE or another MDM solution, and at least 4 years of customer-facing consulting experience, preferably with a systems integrator, consulting organization, or IT provider.
• Experience managing large mobile-device fleets using MDM or UEM platforms, including Omnissa Workspace ONE UEM and Intune.
• Experience configuring compliance policies and managing Azure AD/Entra ID features, including Conditional Access, SSO, and MFA.
• Experience with Office 365 administration; identity providers such as Okta and Ping; MFA solutions such as Duo and RSA; Android, iOS, macOS, Chromebooks, and Windows operating systems; and software distribution.
• Ability to learn and adapt, explain complex technical concepts to varied audiences, and work independently and collaboratively.