36503 Workspace One – Technical Consultant - L2

Cephas Consultancy Services Private Limited; Maharashtra; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

Cephas Consultancy Services Private Limited in India seeks a Workspace ONE – Technical Consultant (L2) to design and implement end-to-end Unified Endpoint Management architectures using Workspace ONE across multi-region setups.

The role requires 5–8 years of experience with Omnissa Workspace One or similar MDM solutions, strong knowledge of SSO, identity integrations, and security best practices. You will lead migrations, optimize security controls, and drive automation initiatives.

Qualifications

• 5–8 years of professional experience in Workspace ONE or MDM solutions.
• Familiarity with SSO, MDM workflows, and device enrollment processes.
• Experience in multi-region deployments and high availability setups.

Responsibilities

• Design and implement end-to-end UEM architecture using Workspace ONE.
• Lead complex migrations with minimal downtime and user impact.
• Architect Zero Trust security frameworks and identity integrations.
• Troubleshoot device enrollment, app deployment, and certificate issues.
• Integrate Workspace ONE with identity providers (Okta, Ping Identity, Azure AD).
• Drive automation for bulk device/user management and reporting.
• Lead security audits and compliance with enterprise standards.

Skills

Workspace ONE UEM

Zero Trust

Identity management

SAML/OIDC

Azure AD

MFA

Intune

Automation

Education

5-8 years enterprise IT experience

Tools

Okta

Ping Identity

ABM / Asset mgmt tooling

Job description

36503 Workspace One – Technical Consultant - L2

About this position

Positions:5 Full Time
Experience
5 - 8 Years

Mobility/Workspace One – Technical Consultant

Role & Responsibilities:

Design and implement end-to-end Unified Endpoint Management (UEM) architecture using Omnissa Workspace ONE including multi-region and high availability setups.

Lead complex migrations (e.g., legacy MDM / Microsoft Intune to Workspace ONE) with minimal downtime and user impact.

Architect and implement Zero Trust security frameworks leveraging Workspace ONE Access, conditional access, and device compliance.

Perform deep-dive troubleshooting across device enrollment, application deployment, certificate issues, and identity integrations.

Design and maintain scalable ACC (AirWatch Cloud Connector) architecture, including Kerberos, LDAP, and enterprise directory integrations.

Integrate Workspace ONE with identity providers like Okta, Ping Identity, and Azure AD for advanced SSO and federation use cases.

Implement and optimize Workspace ONE Tunnel, Content Gateway, and Secure Email Gateway (SEG) for secure enterprise access.

Drive automation using REST APIs, PowerShell, and scripting for bulk device/user management, Smart Groups, and reporting.

Design and implement compliance and remediation frameworks, including automated actions based on device posture.

Lead performance tuning and environment health checks for large-scale deployments.

Conduct security audits and hardening aligned with enterprise security standards and compliance frameworks.

Setup, configure and install Workspace ONE UEM.

Setup, configure and install Workspace ONE Access

Configure Apple iOS, MacOS, Android and Windows device enrolment.

Configure Enrollment and Organization Group assignment

Enhanced Management configurations (Profile/Policies/System Settings)

Configure Android for Enterprise

Configure Apple Business Manager (ABM)

Skills:

Expert-level knowledge of Workspace ONE UEM architecture components (Console, Device Services, API, ACC, Database).

Strong experience with certificate-based authentication (SCEP, PKI, CA integration).

Deep understanding of identity and access management concepts including SAML, OAuth, OIDC.

Hands-on experience with Zero Trust and Conditional Access policies in Azure AD and Workspace ONE.

Advanced troubleshooting of Android Enterprise (Work Profile, COPE, Fully Managed) and Apple DEP/ABM integrations.

Experience with Workspace ONE Intelligence for automation, reporting, and analytics.

Expertise in application lifecycle management (Win32, macOS pkg, mobile apps, internal apps).

Knowledge of networking concepts (DNS, load balancers, reverse proxies, SSL offloading).

Familiarity with enterprise mobility security controls, data loss prevention (DLP), and compliance frameworks.

7+ years of professional experience in Omnissa Workspace One or any MDM solution.

7+ years of experience in customer-facing positions as a consultant, preferably within a system integrator, consulting organization or IT provider.

Adaptable and progressive learner with the ability to explain complex technical concepts to a variety of audiences.

Ability to work independently and work collaboratively in a team environment.

Experience managing large fleet of mobile devices using an MDM or UEM

Expertise in management of MDM platforms Omnissa Workspace ONE UEM, Intune

Experience with Configuration, compliance policies.

Knowledge of Azure AD, including conditional access to control access, features, SSO, MFA and functionality

Experience with

Office 365 Admin

IDPs (e.g. Okta, PING).

MFA (e.g. Duo, RSA).