Senior Mobile Device Management (MDM) Specialist

Behind every seamless device experience is someone who made the magic happen. We’re hiring a Senior MDM Specialist to shape the future of secure, scalable device management at On.Think strategy, security, automation — and zero device friction.

The Senior MDM Specialist drives the strategy, design, and reliable operation of On's Mobile Device Management ecosystem, ensuring a secure, scalable, and seamless end-user experience for all mobile and corporate devices. This role is crucial in minimizing device-related friction and security risks, directly supporting the productivity and operational excellence of our fast-growing global team.

MDM Strategy and Security Posture:

• Define the Mobile Device Management (MDM) roadmap, architecture, and standards in alignment with global IT strategy and security requirements
• Establish and enforce security policies, compliance baselines, and data protection mechanisms across the entire mobile device fleet (iOS, Android, macOS)
• Evaluate and recommend new MDM technologies, features, and configurations to continuously improve security, compliance, and end-user productivity

Deployment and Lifecycle Management:

• Design and implement automated, zero-touch enrollment and provisioning processes for all corporate devices using Apple DEP/Business Manager and other relevant tools
• Oversee the continuous monitoring, patching, and configuration management of the MDM environment to ensure high availability and optimal performance
• Develop and maintain comprehensive documentation, runbooks, and disaster recovery procedures for all MDM-controlled services and platforms

Advanced End-User Service and Support:

• Act as the highest escalation point (Tier 3) for complex or recurring issues related to device configuration, application deployment, and MDM-platform stability
• Analyze service desk tickets and monitoring data to identify trends, root causes, and opportunities for proactive system optimization and self-service improvements
• Lead the successful deployment of corporate applications and profile configurations via the MDM platform, ensuring minimal disruption and adherence to security best practices

• Deep expertise in Apple Centric MDMs (policies, extension attributes, patch management) for the macOS/iOS fleet
• Solid proficiency in Microsoft Intune (Endpoint Manager) for Windows and Android management
• Experience working with other MDM tools (e.g., Workspace ONE, Kandji, MobileIron)
• Advanced scripting in Bash/Zsh (macOS) and PowerShell (Windows) to create custom extension attributes and remediation workflows
• Hands-on experience implementing CIS Benchmarks or NIST frameworks via MDM configuration profiles
• Proven track record of executing MDM migrations
• Hands-on experience implementing CIS Benchmarks or NIST frameworks via MDM configuration profiles
• Knowledge of macOS Security Internals (Gatekeeper, XProtect, TCC permissions, Kernel/System Extensions)
• Ability to design the "Lifecycle of a Device" from procurement to decommissioning
• Ability to assess the current state of the device environment, and visualize a "Future State”, or assist in building a roadmap
• Experience leading a migration project
• Ability to translate complex technical configurations into "Self-Help" articles for users
• Willingness to mentor L1/L2 support staff on MDM troubleshooting