Workspace One Uem Jobs (NOW HIRING)

The Role

We are looking for a hands-on Workspace ONE UEM Engineer to own the full delivery lifecycle across our managed service and professional services customer base: design, deployment, troubleshooting, upgrades, and documentation. You will be a named technical resource for customers working alongside a small team of experienced Tech Orchard architects with direct Omnissa SE relationships.

This is a senior individual contributor position. You will not need to manage people. You will manage technically simple and complex problems across iOS, Android, Windows, and macOS endpoints with deep integrations into enterprise identity, certificate infrastructure, security policy, and cloud management platforms.

Core Responsibilities

Platform Delivery & Architecture

•     Design, deploy, and configure Workspace ONE UEM environments

•     Manage enrollment workflows across all platforms: Apple ADE/DEP/ADUE (Account-Driven User Enrollment), Android Enterprise (fully managed, work profile, COPE), Windows Autopilot (user-driven and pre-provisioning), and macOS MDM

•     Configure and maintain WS1 Tunnel per-app VPN: gateway profiles, network traffic rules, certificate-based auth, and split-tunnel policy

•     Build and maintain certificate infrastructure integrations: SCEP templates, ADCS connector, ECDSA/RSA profile constraints, and CA-signed device identity certificates

•     Configure OAuth2-based and EAS managed email profiles for M365/Exchange Online; troubleshoot modern auth flows and EAS policy conflicts

•     Deploy Workspace ONE Intelligence: sensor authoring (PowerShell, Bash, Python), custom dashboards, automation workflows, and Freestyle Orchestrator

•     Implement Conditional Access Compliance Partner enrollment flows with Microsoft Entra ID including CA policy design, compliance token service configuration, and hybrid Entra Join scenarios

•     Manage application lifecycle: VPP, Managed Google Play, Windows WinGet/MSIX packaging, and line-of-business app deployment

Troubleshooting & Escalation

•     Own complex break-fix scenarios across the full WS1 stack — enrollment loops, compromised device detection false positives, profile delivery failures, Tunnel connectivity issues, and certificate chain validation errors

•     Interpret MDM enrollment logs, Workspace ONE Hub diagnostics, Apple MDM protocol responses, Android Debug Bridge output, and Windows Event Log to isolate root cause

•     Document troubleshooting findings, workarounds, and resolution steps in structured knowledge base articles for customer and internal use

Content Creation & Enablement

•     Author technical guides, deployment playbooks, and reference architecture documents for customer self-enablement and team knowledge transfer

•     Create structured troubleshooting runbooks for common enrollment, certificate, and identity integration failure patterns

•     Contribute to internal knowledge base and, where appropriate, publish technical content to the broader Omnissa partner community

•     Support internal onboarding and skills development as the team grows

Customer Engagement & Project Administration

•     Maintain weekly status communications with open project owners; track tasks and follow-ups accurately in Accelo or equivalent CRM

•     Scope and estimate effort for new WS1 deployments including resource requirements, platform dependencies, and migration complexity

•     Represent Tech Orchard in customer working sessions, scoping calls, onboarding planning, and vendor escalation meetings

•     Work with Tech Orchard team and principal architects on cross-platform and cross-product implementations

Continuous Learning & Partner Engagement

•     Track Omnissa release notes, Tech Zone publications, and community content; surface relevant platform changes to the delivery team

•     Maintain and advance Omnissa certifications; participate in partner enablement sessions and early-access programs

•     Engage vendor SE contacts for product escalations, roadmap context, and technical previews relevant to customer environments

Required Skills & Qualifications

Must-Have (Non-Negotiable)

•     Workspace ONE UEM 2+ years hands-on, production environments

•     iOS/iPadOS: ADE/DEP, supervised mode, ADUE (Account-Driven)

•     Android Enterprise: fully managed, work profile, COPE/COBO

•     Windows 10/11: Autopilot (user-driven + pre-prov), co-management

•      Group Policy and Configuration Service Provider

•      Windows Updates for Business

•     macOS MDM: profile delivery, PPPC, kernel/system extensions

•     Microsoft Entra ID: Conditional Access, hybrid join, compliance

•     Exchange Online / M365: EAS profiles, OAuth2, modern auth

•     SCEP / ADCS certificate integration and troubleshooting

•     Strong written and verbal customer-facing communication

•     Ability to interpret MDM logs and enrollment diagnostics

Strongly Preferred

•     WS1 Tunnel per-app VPN — configuration and troubleshooting

•     SCEP/ECDSA/RSA certificate profile constraints

•     Workspace ONE Intelligence: sensors, automations, Freestyle

•     Entra ID Conditional Access compliance partner enrollment

•     Zebra Android: StageNow, MX framework, enterprise provisioning

•     Samsung Knox enrollment, containerization, and KME

•     Apple Business Manager: VPP, ASM, device assignment

•     Okta or other IdP federation with Workspace ONE

•     WS1 ModStack on-premises component architecture

•     Microsoft SCCM / co-management with Intune or WS1

•     Omnissa certification (any level)

•     Technical content creation: runbooks, guides, or blog articles

Nice to Have

•     Workspace ONE Horizon or App Volumes familiarity

•     Zero Trust / ZTNA architecture awareness

•     Regulated industry experience (healthcare, financial services, legal)

•     Jamf Pro for macOS management

•     Microsoft Intune for cross-platform customer guidance

•     Linux system administration basics

•     Git / version control for script and config management

•     Bash or Python scripting for sensor/automation authoring

•     Virtual desktop or VDI management concepts

Certifications Valued

•     Omnissa VCP-DTM (Workspace ONE UEM)

•     Omnissa VCAP-DTM (Advanced)

•     Microsoft MD-102: Endpoint Administrator

•     Microsoft SC-300: Identity and Access Administrator

•     CompTIA Security+

•     ITIL Foundation

•     Any active Omnissa partner training completions

What We Offer

•     Remote-first position work from anywhere in the US

•     Monthly performance bonuses

•     Flexible work schedule - unlimited vacation days

•     No office politics

•     Simple IRA with Matching

•     Stock and ownership opportunities as the company scales

•     Paid training, certification exam fees, and conference attendance including Omnissa partner events

•     Direct collaboration with experienced Omnissa principal architects and former Omnissa SE contacts

•     A small, technically serious team where your work is visible and your expertise is respected

•     Clear growth path into senior or principal architect roles as the company expands

Tech Orchard is a 15-year Omnissa Platinum Partner and a fast-growing End-User Computing consultancy serving commercial and enterprise customers across a wide range of industries. Engineers here work directly with senior architects, have meaningful visibility into every engagement, and can see the direct impact of their work on customer outcomes. We are looking for someone who loves EUC and a heart for serving others.