Assoc Prin Eng MDM - VMware WorkspaceOne

Unisys; Bengaluru; On-site; INR 2,800,000 - 4,000,000; Full time

Job summary

Unisys is hiring an L3 Engineer to act as a subject-matter expert for a multi-tenant Workspace ONE MSP environment, supporting ~30 clients across SaaS, hybrid, and on-prem deployments.

The role oversees integrations, escalation resolution, upgrade planning, automation strategy, and governance across all supported environments. 7–8 years in EUC mobility with deep Workspace ONE expertise are expected.

Qualifications

• 7-8 years in enterprise End User Computing / mobility with expert, hands-on Workspace ONE UEM administration and architecture in multi-tenant or MSP environments.
• Proven expertise across Workspace ONE UEM, Access, UAG, Assist, Intelligence, ACC, AWCM, SEG, Content Gateway, ENS, and Tunnel.

Responsibilities

• Own end-to-end Workspace ONE architecture across SaaS, Hybrid, and On-Premises models, including UEM, Access, UAG, Assist, and related components.
• Design enrollment strategies for multiple platforms and device models across corporate-owned, corporate-shared, and BYOD.
• Define profile/baseline architecture and resolve conflicts between ADMX, CIS baselines, and legacy GPOs.
• Own application lifecycle strategies for Win32/MSI, PKG, APK/AAB and various delivery channels.
• Architect Android Enterprise deployments and Apple ecosystem integrations, including ABM/DEP and VPP management.
• Design identity and access integrations (AD via ACC/LDAP, Entra ID, SAML, Kerberos SSO) and conditional access.

Skills

Workspace ONE UEM

Workspace ONE Access

UAG

AD/LDAP

SAML

Education

Bachelor's degree in a relevant field

Tools

VMware

Omnissa certification

Job description

About the Role

This position is for a L3 Engineer who will act as a subject-matter expert for a multi-tenant Workspace ONE MSP environment supporting approximately 30 clients, spanning shared managed-service tenants, dedicated customer SaaS consoles, and legacy on-premises deployments. The L3 Engineer is accountable for integrations, escalated incident resolution, upgrade planning, automation strategy, and technical governance across all supported customer environments.

Key Responsibilities

• Platform Architecture & Environment Management: Own the end-to-end Workspace ONE architecture across SaaS, Hybrid, and On-Premises models, covering UEM, Workspace ONE Access, Unified Access Gateway (UAG), Assist, Intelligence, ACC/AWCM connectors, and gateways. Define Organization Group hierarchies (tenant, sub-OGs, staging, platform-based, and business-unit OGs), global UEM settings, and environment segregation across dev/test/pre-prod/production, controlling configuration promotion between environments. Plan, document, and execute upgrades for UEM, Access, UAG, Assist, and related components, including rollback readiness and post-upgrade validation.
• Enrollment & Device Lifecycle: Design enrollment strategies for Android, iOS, macOS, Windows, and rugged devices across Corporate-Owned, Corporate-Shared, and BYOD models, including Autodiscovery, zero-touch, DEP/Automated Device Enrollment, Windows OOBE and PPKG provisioning, and staging scenarios.
• Policies, Profiles & Baselines: Define profile and baseline architecture per platform; design and debug custom ADMX/OMA-URI payloads; resolve conflicts between ADMX profiles, CIS/security baselines, custom settings, and legacy GPOs.
• Application Lifecycle: Own the application lifecycle strategy: Win32/MSI/EXE, PKG, APK/AAB and Managed Google Play, ABM/VPP delivery, Omnissa SDK integration, deployment ring design (pilot to broad), dependency and rollback planning.
• Android Enterprise & Rugged: Architect Android Enterprise deployments (Work Profile, Fully Managed, COPE, Dedicated) including rugged fleets, Secure Launcher kiosk designs, corporate-shared device workflows, and OS/app update strategy.
• Apple Ecosystem: Maintain the Apple ecosystem integrations: ABM/DEP profiles with supervision and user affinity, APNs certificate lifecycle, VPP token management, and resolution of ABM–VPP–UEM synchronization issues.
• Identity, SSO & Access: Design identity and access integrations: AD via ACC/LDAP, Microsoft Entra ID, Workspace ONE Access IdPs and access policies, SAML federations with third-party IdPs and SaaS applications, Android CertProxy SSO, iOS Kerberos SSO, conditional access design, and custom role/delegated administration models.
• UAG & Secure Access: Architect and operate UAG: OVA/OVF deployment in vSphere, Photon OS administration, one/two/three-NIC DMZ designs, HA behind enterprise load balancers (F5 or equivalent), session persistence design, and SSL passthrough/bridging/offloading topologies with correct certificate, cipher, and SNI handling. Design and troubleshoot Per-App VPN / Workspace ONE Tunnel with Device Traffic Rules, SEG (with/without Kerberos), Content Gateway, and ENS, including end-to-end network path analysis (routing, firewall, NAT, DNS, ports).
• PKI & Certificates: Define PKI strategy for certificate-based authentication; manage CAs, SCEP and issuance workflows, public SSL certificate lifecycles, Java keystores for AWCM, and deep trust-chain troubleshooting using OpenSSL (chains, CSR validation, TLS handshakes, CRL/OCSP, SAN/hostname mismatches).
• Automation & Intelligence: Design Freestyle Orchestrator workflows for onboarding, remediation, and change automation; integrate Workspace ONE Intelligence for dashboards, automations, webhooks/SIEM/ticketing integration, and management-level reporting.
• Privacy & Governance: Define privacy governance for BYOD/Corporate-Owned/Corporate-Shared scenarios aligned with customer contractual and data-protection expectations (Work Profile, iOS User Enrollment, data-collection minimization).
• L3 Troubleshooting & Incident Ownership: Serve as final internal escalation for complex incidents across UEM, Access, UAG, ACC/AWCM, Assist, SEG, Content Gateway, and ENS; perform root-cause analysis; troubleshoot Windows communication stack (AWCM/WNS) issues; lead service restoration across heterogeneous customer architectures.
• Vendor Escalation, Documentation & Mentoring: Manage vendor escalations to Omnissa Support (case creation, evidence and log collection, reproduction, fix validation); maintain runbooks, architecture diagrams, and best-practice standards; mentor L1/L2/L2.5 associates and act as technical decision-maker for projects and transitions.

Required Skills & Experience

7-8 years in enterprise End User Computing / mobility, with 5+ years of expert, hands‑on Workspace ONE UEM administration and architecture in multi‑tenant or MSP environments. Proven l expertise across Workspace ONE UEM, Access, UAG, Assist, Intelligence, ACC, AWCM, SEG, Content Gateway, ENS, and Tunnel.

Preferred Qualifications

Omnissa/VMware certification (e.g., VCP/VCAP – Digital Workspace or equivalent). French language proficiency

You will be successful in this role if you have:

BA/BS degree and 7-8 years’ relevant experience OR equivalent combination of education and experience

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law. Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at [e-mail]. US job seekers can find more information about Unisys’ EEO commitment here.

Unisys is a global technology solutions company that powers breakthroughs for the world’s leading organizations. Our solutions – cloud, AI, digital workplace, logistics and enterprise computing – help our clients challenge the status quo and unlock their full potential. To learn how we have been helping clients push what’s possible for more than 150 years, visit unisys.com and follow us on LinkedIn. https://www.unisys.com/unisys-legal/recruiting

Notice for U.S. Applicants: Unisys is an Equal Opportunity Employer – Minorities/ Females/ Veterans/ Individuals with Disabilities/ Sexual Orientation/ Gender Identity