Lead Mobility Engineering SME

AIG

. Own architecture, engineering, security, automation, and operational health of the enterprise mobile and modern endpoint ecosystem .

Posted 9/23/2026full-timeUnited StatesSenior💰 $150,000 - $190,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in enterprise mobile services, including Intune engineering, MDM/MAM architecture, and modern Windows provisioning. Proficient in automation, troubleshooting, and managing complex endpoint ecosystems with a focus on security and compliance.

Highest-signal resume keywords

Intune EngineeringMDM/MAM ArchitectureWindows AutopilotPowerShell Automation802.1X Wi-Fi Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Endpoint EngineeringMobile Device ManagementApplication ProtectionConditional AccessDevice EnrollmentTroubleshootingNetwork SecurityCompliance PoliciesCertificate-Based AuthenticationOS Lifecycle Management

Soft Skills

Clear CommunicationTechnical DocumentationRoot-Cause AnalysisMentoring

Tools & Technologies

Microsoft IntuneApple Business ManagerWorkspace ONE UEMPowerShellMicrosoft GraphREST APIsJSONAndroid EnterpriseVPN SolutionsTLS Inspection

Certifications & Qualifications

MD-102SC-300SC-200SC-100Apple Certified IT ProfessionalAndroid Enterprise ProfessionalCCNA

Industry Keywords

Digital Workplace EngineeringEnterprise MobilityChange ManagementIncident ManagementProblem Management

Tech Stack

Tools & technologies

AndroidCloudDNSiOSJamf

About the role

Key responsibilities & impact

Own architecture, engineering, security, automation, and operational health of the enterprise mobile and modern endpoint ecosystem
Design, build, test, automate, troubleshoot to root cause, document, and lead controlled production change end to end
Own Intune enrollment, MAM, app protection, compliance policies, configuration profiles, app deployment, certificates, and secure access
Own Apple Business Manager, Automated Device Enrollment, APNs certificate lifecycle, VPP, supervision, Declarative Device Management, and managed software updates
Manage Android Enterprise modes including fully managed, dedicated/kiosk, COPE, and work profile
Define compatibility, ring-based rollout, and lifecycle plans for major OS releases
Apply additional UEM platform knowledge to migration, coexistence, and platform-selection decisions
Engineer Entra ID registration, join and hybrid join, device-based Conditional Access, token/session controls, passwordless authentication, and certificate-based authentication
Own certificate infrastructure including SCEP, PKCS, Intune Certificate Connector, Cloud PKI, NDES, trusted roots, and renewal automation
Design and validate Conditional Access policies and troubleshoot OAuth 2.0, OIDC, SAML, and MSAL failures
Own Windows Autopilot, provisioning, Enrollment Status Page tuning, hardware hash and attestation, OEM supply process, update rings, and Autopatch
Manage settings catalog, security baselines, filters, scope tags, RBAC, Win32/MSIX packaging, detection logic, and supersedence chains
Engineer compliance, app protection, DLP, encryption, certificate-based access, Defender for Endpoint integration, ASR rules, jailbreak/root detection, key escrow, device wipe, Endpoint Privilege Management, and LAPS
Design and troubleshoot 802.1X, EAP-TLS Wi-Fi, RADIUS/NPS, VPN, Global Secure Access, ZTNA, DNS, proxy, TLS inspection, APNs/FCM egress, IPv6, carrier, and eSIM behavior
Automate policy deployment, lifecycle operations, reporting, and drift detection using PowerShell, Microsoft Graph, REST, and JSON
Apply source-controlled policy-as-code with peer review and ring promotion
Build monitoring and alerting for enrollment failure, noncompliance, deployment error, and service degradation
Lead change management, Tier 3/4 troubleshooting, root-cause analysis, vendor escalations, architecture documentation, runbooks, decision records, mentoring, engineering standards, roadmap, and technical debt backlog

Requirements

What you’ll need

7+ years in endpoint, mobility, or digital workplace engineering, with significant ownership of enterprise mobile services in a large or complex environment
Deep hands-on Intune engineering: enrollment, compliance, configuration profiles, app deployment, app protection, reporting, troubleshooting
Strong MDM and MAM architecture knowledge across corporate-owned and BYOD scenarios
Experience managing iOS/iPadOS and Android Enterprise models and OS lifecycle
Hands-on exposure to at least one additional UEM platform such as Workspace ONE UEM (AirWatch), Ivanti/MobileIron, Jamf or SOTI, including migration or coexistence work
Modern Windows provisioning experience including Autopilot, ESP troubleshooting, and update ring strategy
Entra ID, modern authentication, Conditional Access dependencies, and certificate-based secure access
Practical mobility network competence: 802.1X and certificate-based Wi-Fi, VPN and per-app VPN, DNS, proxy and TLS inspection effects
Demonstrated automation with PowerShell, Graph, REST APIs and JSON
Root-cause troubleshooting using logs, telemetry and structured testing
Enterprise change, incident and problem discipline
High-quality technical documentation and clear communication to technical and nontechnical stakeholders
Preferred: Advanced end-to-end Microsoft Intune ownership and equivalent Omnissa Workspace ONE UEM design, engineering and support experience
Preferred: Apple Business Manager and Declarative Device Management at scale, Android Enterprise dedicated and kiosk fleets, mobile threat defense, and zero-touch provisioning
Preferred: Large-scale UEM migration into Intune
Preferred: Telecom and carrier or eSIM integration, passwordless authentication on mobile, or legacy VPN retirement
Preferred: Experience in a global, highly regulated, or large-enterprise environment
Preferred: Certifications such as MD-102, SC-300, SC-200, SC-100, Apple Certified IT Professional, Android Enterprise Professional, or CCNA

Benefits

Comp & perks

Bonus in accordance with the terms of the applicable incentive plan
Competitive benefits through AIG’s Total Rewards Program
Health and wellbeing benefits
Financial security benefits
Professional development
Continuous learning and development
Employee Resource Groups (ERGs)
Reasonable accommodations for applicants and employees with disabilities