Forward Engineer - Unified Endpoint Management, Workspace ONE

About TaskUs: TaskUs is a provider of outsourced digital services and next-generation customer experience to fast-growing technology companies, helping its clients represent, protect and grow their brands. Leveraging a cloud-based infrastructure, TaskUs serves clients in the fastest-growing sectors, including social media, e-commerce, gaming, streaming media, food delivery, ride-sharing, HiTech, FinTech, and HealthTech. 

The People First culture at TaskUs has enabled the company to expand its workforce to approximately 60,000 employees globally. Presently, we have a presence in twenty-three locations across twelve countries, which include the Philippines, India, and the United States.

It started with one ridiculously good idea to create a different breed of Business Processing Outsourcing (BPO)! We at TaskUs understand that achieving growth for our partners requires a culture of constant motion, exploring new technologies, being ready to handle any challenge at a moment’s notice, and mastering consistency in an ever-changing world.

What We Offer: At TaskUs, we prioritize our employees' well-being by offering competitive industry salaries and comprehensive benefits packages. Our commitment to a People First culture is reflected in the various departments we have established, including Total Rewards, Wellness, HR, and Diversity. We take pride in our inclusive environment and positive impact on the community. Moreover, we actively encourage internal mobility and professional growth at all stages of an employee's career within TaskUs. Join our team today and experience firsthand our dedication to supporting People First.

Job Description: Forward Engineer – Unified Endpoint Management (Workspace ONE & AI/Agentic Automation)

Job Title: Forward Engineer – Unified Endpoint Management (Workspace ONE)

Department: Modern Workplace / Digital Workplace Engineering & Automation

Employment Type: Full-Time

Location: [Hybrid/On-site]

Experience Level: Mid–Senior (4–8+ years)

Role Overview

The Forward Engineer – UEM (Workspace ONE) designs, builds, and deploys scalable enterprise endpoint solutions across multi-OS ecosystems (Windows 11, macOS, iOS, and Android). In this forward-leaning role, you will bridge traditional Modern Endpoint Management with modern Artificial Intelligence, Generative AI, and Agentic Automation. You will develop intelligent workflows, autonomous self-healing device remediations, and AI agent integrations that enhance digital employee experience (DEX) and drive zero-touch IT operations.

Key Responsibilities

1. Multi-OS Unified Endpoint Management (Omnissa / VMware Workspace ONE)

• Cross-Platform Lifecycle Management: Design, configure, and maintain end-to-end device enrollment, configuration profiles, compliance engines, and application deployment across:
• Windows 11: Modern management via OMA-DM, Drop-Ship Provisioning, BitLocker, CSP policies, patch baselines, and PowerShell scripting.macOS: Apple Automated Device Enrollment (ADE), Declarative Device Management (DDM), FileVault, configuration profiles, and Bash/Zsh scripting.iOS / iPadOS: Supervision via Apple Business Manager (ABM), Per-App VPN, Managed App Config, MAM, and supervised security baselines.Android: Android Enterprise (Work Profile, Fully Managed, Dedicated / COSU), OEMConfig integrations, and Google Play for Work distribution.
• Architecture & Infrastructure: Maintain Workspace ONE UEM services, Access (identity/conditional access), Intelligence, Tunnel, and Unified Access Gateway (UAG) deployments. 
• Security & Zero Trust: Enforce posture checks, continuous compliance policies, zero-trust network access (ZTNA), certificate life-cycle management (SCEP/PKI), and automated device quarantine. 

2. AI, GenAI & Agentic Automation

• Autonomous Remediation & Self-Healing: Build agentic loops and autonomous routines that interface with Workspace ONE Intelligence and REST APIs to proactively detect, diagnose, and auto-remediate OS and configuration drifts.
• Agentic Workflows & Tool Calling: Design tool-using AI agents capable of executing multi-step UEM operations (e.g., automated triage, policy audits, dynamic group re-assignments). 
• GenAI-Assisted Operations: Implement Retrieval-Augmented Generation (RAG) and LLM-assisted tools for helpdesk copilot solutions, dynamic policy creation, and automated script translation across shell dialects (PowerShell, Bash, Python). 
• Data-Driven Insights: Integrate Workspace ONE Intelligence / Sensors telemetry with AI models to predict hardware degradation, patch failures, or battery and crash anomalies.

3. Engineering & Deployment

• API-First Automation: Build custom integrations and automations using Workspace ONE REST APIs, Webhooks, Python, and PowerShell.
• Documentation & Governance: Maintain infrastructure-as-code or automated deployment documentation, prompt-engineering guidelines, and AI safety guardrails for automated endpoint actions. 

Required Technical Skills & Qualifications

Core UEM & OS Qualifications

• Experience: 4+ years of hands-on enterprise engineering experience with VMware / Omnissa Workspace ONE UEM (AirWatch), Workspace ONE Access, and Workspace ONE Intelligence. 
• Deep Multi-OS Expertise:
• Windows 11: Windows Update for Business (WUfB), BitLocker, CSPs, Win32 software packaging, PowerShell automation.macOS: Apple Business Manager, APNs, configuration profiles, shell scripting (Bash/Zsh), MDM payloads.iOS / Android: Deep knowledge of Apple Push Notification service (APNs), Android Enterprise management modes, AppConfig, and certificate-based authentication.
• Identity & Security: Solid understanding of SAML 2.0, OIDC, PKI/SCEP certificate enrollment, conditional access, and zero-trust architectures. 

AI, GenAI & Scripting Competencies

• AI/LLM Principles: Strong working understanding of LLM APIs (OpenAI, Claude, Llama, Azure OpenAI), prompt engineering, embeddings, and structured schema outputs. 
• Agentic Frameworks: Conceptual and practical grasp of agentic patterns (function/tool calling, multi-agent orchestration, agent memory, task planning) using frameworks such as LangChain, LangGraph, AutoGen, or CrewAI. 
• Programming & Automation: Proficient in Python and PowerShell for API interaction, automation pipelines, and agent tooling. 

Preferred Qualifications & Certifications

• Skills:
• Omnissa Workspace ONE. Windows 11, MacOS, Android and IOS.
• Experience with Model Context Protocol (MCP) or tool-augmented LLM infrastructure. 
• Experience migrating legacy systems (e.g., GPO, SCCM, co-management) into pure cloud-native modern management.
• Familiarity with DEX tools (Workspace ONE Assist, Freestyle Orchestrator, DEEM).

How We Partner To Protect You: TaskUs will neither solicit money from you during your application process nor require any form of payment in order to proceed with your application. Kindly ensure that you are always in communication with only authorized recruiters of TaskUs.

DEI: In TaskUs we believe that innovation and higher performance are brought by people from all walks of life. We welcome applicants of different backgrounds, demographics, and circumstances. Inclusive and equitable practices are our responsibility as a business. TaskUs is committed to providing equal access to opportunities. If you need reasonable accommodations in any part of the hiring process, please let us know.

We invite you to explore all TaskUs career opportunities and apply through the provided URLhttps://www.taskus.com/careers/.