Systems Architect IV

ActioNet; Rockville (MD); On-site; USD 221,000 - 270,000; Full time

Job summary

ActioNet is seeking a lead Enterprise Mobility Architect to define and maintain designs supporting secure access from government-furnished and personal devices. You will shape current and future state architecture, integration strategy, and modernization plans across mobile platforms, identity services, cloud, apps, and infrastructure.

The role requires extensive experience in enterprise mobility, MDM/UEM, and federal security compliances, with leadership in architecture and integration planning

Qualifications

• Bachelor’s degree in a technical discipline.
• 10+ years in enterprise infrastructure or mobility architecture.
• 5+ years designing/integrating enterprise mobility solutions.
• Experience with MDM/UEM, GFE and BYOD models, iOS/iPadOS and Android.
• Knowledge of federal security processes and NIST guidelines.

Responsibilities

• Develop and maintain architecture diagrams, interface maps, and technical designs.
• Define secure architecture for GFE and BYOD containerized access.
• Lead planning for MaaS360, Intune, 365, AD/Azure AD, and device platforms.
• Develop service roadmaps for unified endpoint management and access.
• Define configuration baselines and change management; coordinate with stakeholders.
• Establish guidelines for mobile app deployment and integration; document requirements.
• Integrate security controls and identity-based access in designs.
• Develop mobility disaster recovery plans and testing approaches.
• Assess changes for interoperability and obtain required approvals.

Skills

MDM/UEM

GFE BYOD

iOS/iPadOS

Android

Identity services

Conditional access

BYOD security

Education

Bachelor's degree in computer science or related

Tools

MaaS360

Intune

Azure AD

Microsoft 365

Apple Business Manager

Samsung Knox Mobile Enrollment

IBM MaaS360

Job description

Serves as the lead architect for the enterprise mobility service, defining and maintaining the technical and operational designs that support secure access from government-furnished and personal devices. Leads current-state and future-state architecture, integration strategy, configuration standards, and modernization planning across mobile platforms, identity services, cloud services, applications, and supporting infrastructure. Translates mission and user requirements into implementable designs that comply with governance and security requirements.

Salary up to: $245K

• Develop and maintain architecture diagrams, interface and dependency maps, technical designs, as-built documentation, administration guides, and current-state and future-state service workflows.
• Define secure architecture for GFE device management and BYOD containerized access, including identity, authorization, application access, data protection, and separation of agency information from personal content.
• Lead architecture and integration planning for IBM MaaS360, Microsoft Intune, Microsoft 365, Active Directory/Azure AD, Apple Business Manager, and Samsung Knox Mobile Enrollment, or agency-approved replacement platforms.
• Develop service requirements and technical roadmaps for unified endpoint management, expanded mobile access to agency systems, and improved collaboration and productivity capabilities.
• Define infrastructure and device configuration baselines, interface agreements, and change and configuration management approaches; coordinate designs with infrastructure, network, cybersecurity, and end-user service owners.
• Establish frameworks and guidelines for mobile application deployment and integration; document functional and nonfunctional requirements with system owners and support proposed technology submissions to Technical Reference Model.
• Integrate applicable security controls, least privilege, encryption, device hardening, and identity-based access into designs; provide architecture artifacts supporting assessments, authorization, and continuous monitoring.
• Develop and maintain mobility disaster recovery plans and testing approaches; establish technical acceptance criteria and review engineering test results before recommending production deployment.
• Assess proposed changes for interoperability, supportability, security, lifecycle cost, and operational impact; obtain required Government approvals and adapt architecture responsibilities to the selected task execution option.

Qualifications

• Bachelor’s degree in computer science, information systems, engineering, or a related technical discipline.
• 10 or more years in enterprise infrastructure or mobility architecture and engineering, including at least 5 years designing or integrating enterprise mobility or endpoint management solutions.
• Demonstrated architecture experience with MDM/UEM, GFE and BYOD models, iOS/iPadOS and Android, containerization, Microsoft 365, identity services, and conditional access.
• Ability to produce technical designs, configuration standards, integration requirements, migration roadmaps, and recovery plans; working knowledge of federal security assessment and authorization processes and applicable NIST guidance.

Preferred qualifications Direct experience with MaaS360 and Intune; architecture or endpoint platform certifications; experience applying Zero Trust principles, designing cloud integrations, and coordinating architecture across federal service providers.

ActioNet Core Value #1 - Instill Integrity In Everything We Do