Assoc Prin Eng MDM - VMware WorkspaceOne

This position is for a L3 Engineer will act as a subject-matter expert for a multi-tenant Workspace ONE MSP environment supporting approximately 30 clients, spanning shared managed-service tenants, dedicated customer Saa S consoles, and legacy on-premises deployments. The L3 Engineer is accountable for integrations, escalated incident resolution, upgrade planning, automation strategy, and technical governance across all supported customer environments. Key Responsibilities Platform Architecture & Environment Management: Own the end-to-end Workspace ONE architecture across Saa S, Hybrid, and On-Premises models, covering UEM, Workspace ONE Access, Unified Access Gateway (UAG), Assist, Intelligence, ACC/AWCM connectors, and gateways. Define Organization Group hierarchies (tenant, sub-OGs, staging, platform-based, and business-unit OGs), global UEM settings, and environment segregation across dev/test/pre-prod/production, controlling configuration promotion between environments. Plan, document, and execute upgrades for UEM, Access, UAG, Assist, and related components, including rollback readiness and post-upgrade validation. Enrollment & Device Lifecycle: Design enrollment strategies for Android, i OS, mac OS, Windows, and rugged devices across Corporate-Owned, Corporate-Shared, and BYOD models, including Autodiscovery, zero-touch, DEP/Automated Device Enrollment, Windows OOBE and PPKG provisioning, and staging scenarios. Policies, Profiles & Baselines: Define profile and baseline architecture per platform; design and debug custom ADMX/OMA-URI payloads; resolve conflicts between ADMX profiles, CIS/security baselines, custom settings, and legacy GPOs. Application Lifecycle: Own the application lifecycle strategy: Win32/MSI/EXE, PKG, APK/AAB and Managed Google Play, ABM/VPP delivery, Omnissa SDK integration, deployment ring design (pilot to broad), dependency and rollback planning. Android Enterprise & Rugged: Architect Android Enterprise deployments (Work Profile, Fully Managed, COPE, Dedicated) including rugged fleets, Secure Launcher kiosk designs, corporate-shared device workflows, and OS/app update strategy. Apple Ecosystem: Maintain the Apple ecosystem integrations: ABM/DEP profiles with supervision and user affinity, APNs certificate lifecycle, VPP token management, and resolution of ABM–VPP–UEM synchronization issues. Identity, SSO & Access: Design identity and access integrations: AD via ACC/LDAP, Microsoft Entra ID, Workspace ONE Access Id Ps and access policies, SAML federations with third-party Id Ps and Saa S applications, Android Cert Proxy SSO, i OS Kerberos SSO, conditional access design, and custom role/delegated administration models. UAG & Secure Access: Architect and operate UAG: OVA/OVF deployment in v Sphere, Photon OS administration, one/two/three-NIC DMZ designs, HA behind enterprise load balancers (F5 or equivalent), session persistence design, and SSL passthrough/bridging/offloading topologies with correct certificate, cipher, and SNI handling. Design and troubleshoot Per-App VPN / Workspace ONE Tunnel with Device Traffic Rules, SEG (with/without Kerberos), Content Gateway, and ENS, including end-to-end network path analysis (routing, firewall, NAT, DNS, ports). PKI & Certificates: Define PKI strategy for certificate-based authentication; manage CAs, SCEP and issuance workflows, public SSL certificate lifecycles, Java keystores for AWCM, and deep trust-chain troubleshooting using Open SSL (chains, CSR validation, TLS handshakes, CRL/OCSP, SAN/hostname mismatches). Automation & Intelligence: Design Freestyle Orchestrator workflows for onboarding, remediation, and change automation; integrate Workspace ONE Intelligence for dashboards, automations, webhooks/SIEM/ticketing integration, and management-level reporting. Privacy & Governance: Define privacy governance for BYOD/Corporate-Owned/Corporate-Shared scenarios aligned with customer contractual and data-protection expectations (Work Profile, i OS User Enrollment, data-collection minimization). L3 Troubleshooting & Incident Ownership: Serve as final internal escalation for complex incidents across UEM, Access, UAG, ACC/AWCM, Assist, SEG, Content Gateway, and ENS; perform root-cause analysis; troubleshoot Windows communication stack (AWCM/WNS) issues; lead service restoration across heterogeneous customer architectures. Vendor Escalation, Documentation & Mentoring: Manage vendor escalations to Omnissa Support (case creation, evidence and log collection, reproduction, fix validation); maintain runbooks, architecture diagrams, and best-practice standards; mentor L1/L2/L2.5 associates and act as technical decision-maker for projects and transitions. Required Skills & Experience 7-8 years in enterprise End User Computing / mobility, with 5+ years of expert, hands-on Workspace ONE UEM administration and architecture in multi-tenant or MSP environments. Proven l expertise across Workspace ONE UEM, Access, UAG, Assist, Intelligence, ACC, AWCM, SEG, Content Gateway, ENS, and Tunnel. Preferred Qualifications Omnissa/VMware certification (e.g., VCP/VCAP – Digital Workspace or equivalent). French language proficiency #LI-UG1 You will be successful in this role if you have: BA/BS degree and 7-8 years’ relevant experience OR equivalent combination of education and experience Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law. Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at Global Recruiting@unisys.com. US job seekers can find more information about Unisys’ EEO commitment here. Unisys is a global technology solutions company that powers breakthroughs for the world’s leading organizations. Our solutions – cloud, AI, digital workplace, logistics and enterprise computing – help our clients challenge the status quo and unlock their full potential. To learn how we have been helping clients push what’s possible for more than 150 years, visit unisys.com and follow us on Linked In. https://www.unisys.com/unisys-legal/recruiting Notice for U.S. Applicants: Unisys is an Equal Opportunity Employer – Minorities/ Females/ Veterans/ Individuals with Disabilities/ Sexual Orientation/ Gender Identity