Mobility Architect
Employer not yet confirmed · Las Vegas, Nevada, United States · hybrid
The Mobility Architect is the senior technical authority for enterprise mobility, responsible for defining the architecture, standards, security controls, governance, and roadmap for mobile devices, applications, identity, connectivity, and lifecycle management. The role translates business and security requirements into scalable solutions for corporate-owned, shared, kiosk, dedicated, and personally owned devices.
This position provides technical leadership for Microsoft Intune, Apple Business Manager, Android Enterprise, Microsoft Entra ID, Conditional Access, mobile application management, device compliance, mobile threat defense, and related mobility technologies. The architect partners with Security, Identity, Network, Infrastructure, ServiceNow, Procurement, Legal, application teams, property IT, carriers, manufacturers, and strategic vendors.
Enterprise Architecture and Strategy
- Define and maintain the enterprise mobility strategy, target-state architecture, reference designs, technical standards, and multiyear roadmap.
- Design scalable enrollment, provisioning, configuration, application delivery, compliance, access, replacement, recovery, and retirement patterns.
- Evaluate emerging platforms, devices, security capabilities, and industry trends; identify architectural risks, technical debt, and consolidation opportunities.
- Create solution designs, architecture diagrams, decision records, implementation guidance, and operational requirements aligned with enterprise security, privacy, legal, and regulatory standards.
Microsoft Intune and Endpoint Management
- Provide expert-level architecture and technical leadership for Microsoft Intune mobile device management and mobile application management.
- Design enrollment, compliance, configuration, application protection, application deployment, certificates, Wi-Fi, VPN, device restrictions, and zero-touch provisioning.
- Define management models for corporate-owned, BYOD, shared, kiosk, frontline, and specialty devices across iOS, iPadOS, Android, and supported mobile platforms.
- Govern enrollment restrictions, assignment filters, dynamic groups, device categories, scope tags, role-based access control, naming, testing, change control, and production deployment.
- Guide engineering teams through complex enrollment, compliance, authentication, application, connectivity, and policy-assignment issues.
Apple Business Manager and Android Enterprise
- Lead Apple Business Manager architecture and its integration with Intune, including Automated Device Enrollment, supervision, enrollment profiles, tokens, application distribution, and device assignment.
- Establish controls for procurement, reseller registration, provisioning, replacement, reassignment, repair, return, loss, theft, and retirement of Apple devices.
- Define Android Enterprise architecture for fully managed, dedicated, corporate-owned work profile, personal work profile, and zero-touch enrollment scenarios.
- Establish supported device, operating system, security update, hardware, accessory, rugged device, scanner, tablet, and kiosk standards.
Identity, Access, and Mobile Security
- Design integrations with Microsoft Entra ID, Conditional Access, multifactor authentication, certificate services, identity providers, and enterprise applications.
- Define device registration, enrollment, ownership, compliance, authentication, and access-control patterns for corporate and BYOD scenarios.
- Design Conditional Access and application protection controls using compliance, approved applications, authentication strength, platform, risk, encryption, data transfer, backup, local storage, and selective wipe requirements.
- Integrate mobile threat defense and define security controls for lost, stolen, compromised, noncompliant, jailbroken, rooted, or unsupported devices.
- Establish architecture for certificates, enterprise Wi-Fi, always-on VPN, per-application VPN, secure web access, and mobile connectivity; support risk assessments, audits, incident response, and remediation.
Applications, Governance, and Technical Leadership
- Define standards for public, internal, line-of-business, web, and managed applications, including configuration, authentication, data protection, deployment, updates, and retirement.
- Establish mobility policies, architecture guardrails, technical review and approval processes, exception management, testing, pilot, rollback, documentation, and operational handoff requirements.
- Provide technical direction, mentoring, and escalation support to mobility engineers, administrators, service desk teams, property IT, project teams, and vendors.
- Develop metrics for compliance, security, adoption, service health, performance, and device lifecycle; communicate technical decisions clearly to engineering teams, business stakeholders, and senior leadership.
Roadmap, Projects, and Vendor Strategy
- Lead architecture workstreams for mobility modernization, MDM migration, device deployment, security, identity, application, and lifecycle initiatives.
- Define project requirements, dependencies, risks, acceptance criteria, implementation standards, and architecture guidance for refreshes, platform changes, mergers, acquisitions, property openings, and business expansion.
- Review solution proposals, statements of work, vendor designs, services, and deliverables for alignment with enterprise architecture and financial objectives.
- Evaluate wireless carriers, device manufacturers, security providers, managed services, platforms, licenses, devices, and support models; support cost-benefit and investment decisions.
Knowledge and Experience
- Ten or more years of progressively responsible experience in enterprise mobility, endpoint management, infrastructure, security, identity, or related technology disciplines, including five or more years designing or governing enterprise MDM and MAM solutions.
- Expert-level knowledge of Microsoft Intune architecture, administration, troubleshooting, governance, enrollment, compliance, configuration, application protection, and application deployment.
- Advanced experience with Apple Business Manager, Automated Device Enrollment, supervised Apple devices, application distribution, Apple lifecycle management, Android Enterprise, and zero-touch enrollment.
- Strong experience with Microsoft Entra ID, Conditional Access, multifactor authentication, device identity, registration, compliance, role-based access control, mobile threat defense, and enterprise data protection.
- Experience with IBM MaaS360 MDM Platform.
- Experience designing solutions for corporate-owned, BYOD, shared, kiosk, dedicated, frontline, rugged, and specialty-device scenarios.
- Experience with certificate-based authentication, enterprise Wi-Fi, VPN, mobile connectivity, Microsoft 365 mobile access, ServiceNow, asset management, reporting, and security integrations.
- Demonstrated success developing architecture diagrams, technical standards, roadmaps, governance documentation, executive presentations, and leading complex cross-functional enterprise initiatives.
- Strong communication, facilitation, stakeholder-management, vendor-management, risk analysis, and decision-making skills in a large, geographically distributed enterprise; hospitality, entertainment, retail, or regulated-industry experience is preferred.
Education and Preferred Certifications
- Bachelor’s degree in computer science, information systems, cybersecurity, engineering, business, or a related field, or an equivalent combination of education and relevant professional experience; a master’s degree is preferred.
- Preferred certifications include Microsoft 365 Certified: Endpoint Administrator Associate, Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Cybersecurity Architect Expert, Apple deployment and management tra