Mobility Architect

Enterprise Architecture and Strategy 

• Define and maintain the enterprise mobility strategy, target-state architecture, reference designs, technical standards, and multiyear roadmap. 

• Design scalable enrollment, provisioning, configuration, application delivery, compliance, access, replacement, recovery, and retirement patterns. 

• Evaluate emerging platforms, devices, security capabilities, and industry trends; identify architectural risks, technical debt, and consolidation opportunities. 

• Create solution designs, architecture diagrams, decision records, implementation guidance, and operational requirements aligned with enterprise security, privacy, legal, and regulatory standards. 

Microsoft Intune and Endpoint Management 

• Provide expert-level architecture and technical leadership for Microsoft Intune mobile device management and mobile application management. 

• Design enrollment, compliance, configuration, application protection, application deployment, certificates, Wi-Fi, VPN, device restrictions, and zero-touch provisioning. 

• Define management models for corporate-owned, BYOD, shared, kiosk, frontline, and specialty devices across iOS, iPadOS, Android, and supported mobile platforms. 

• Govern enrollment restrictions, assignment filters, dynamic groups, device categories, scope tags, role-based access control, naming, testing, change control, and production deployment. 

• Guide engineering teams through complex enrollment, compliance, authentication, application, connectivity, and policy-assignment issues. 

Apple Business Manager and Android Enterprise 

• Lead Apple Business Manager architecture and its integration with Intune, including Automated Device Enrollment, supervision, enrollment profiles, tokens, application distribution, and device assignment. 

• Establish controls for procurement, reseller registration, provisioning, replacement, reassignment, repair, return, loss, theft, and retirement of Apple devices. 

• Define Android Enterprise architecture for fully managed, dedicated, corporate-owned work profile, personal work profile, and zero-touch enrollment scenarios. 

• Establish supported device, operating system, security update, hardware, accessory, rugged device, scanner, tablet, and kiosk standards. 

Identity, Access, and Mobile Security 

• Design integrations with Microsoft Entra ID, Conditional Access, multifactor authentication, certificate services, identity providers, and enterprise applications. 

• Define device registration, enrollment, ownership, compliance, authentication, and access-control patterns for corporate and BYOD scenarios. 

• Design Conditional Access and application protection controls using compliance, approved applications, authentication strength, platform, risk, encryption, data transfer, backup, local storage, and selective wipe requirements. 

• Integrate mobile threat defense and define security controls for lost, stolen, compromised, noncompliant, jailbroken, rooted, or unsupported devices. 

• Establish architecture for certificates, enterprise Wi-Fi, always-on VPN, per-application VPN, secure web access, and mobile connectivity; support risk assessments, audits, incident response, and remediation. 

Applications, Governance, and Technical Leadership 

• Define standards for public, internal, line-of-business, web, and managed applications, including configuration, authentication, data protection, deployment, updates, and retirement. 

• Establish mobility policies, architecture guardrails, technical review and approval processes, exception management, testing, pilot, rollback, documentation, and operational handoff requirements. 

• Provide technical direction, mentoring, and escalation support to mobility engineers, administrators, service desk teams, property IT, project teams, and vendors. 

• Develop metrics for compliance, security, adoption, service health, performance, and device lifecycle; communicate technical decisions clearly to engineering teams, business stakeholders, and senior leadership. 

Roadmap, Projects, and Vendor Strategy 

• Lead architecture workstreams for mobility modernization, MDM migration, device deployment, security, identity, application, and lifecycle initiatives. 

• Define project requirements, dependencies, risks, acceptance criteria, implementation standards, and architecture guidance for refreshes, platform changes, mergers, acquisitions, property openings, and business expansion. 

• Review solution proposals, statements of work, vendor designs, services, and deliverables for alignment with enterprise architecture and financial objectives. 

• Evaluate wireless carriers, device manufacturers, security providers, managed services, platforms, licenses, devices, and support models; support cost-benefit and investment decisions.