Workspace ONE (Omnissa) – L3 SME/Lead

ITCAN PTE. LIMITED

Key Responsibilities

Architecture & Standards

· Own UEM/Access architecture,configuration baselines, and hardening guidelines for multi‑OS endpoints.

· Design device on-boarding flows(corporate and BYOD), group structures, profile strategy, and lifecycle states.

· Define and maintain documentation: solution design, SOPs/runbooks, and knowledge articles.

Platform Operations (L3)

· Lead L3 incident/problem management: deep diagnosis, RCA, Proactive Problem Management, permanent fixes,and post‑incident actions.

· Plan and execute upgrades/patching for UEM components (Console, Device Services, DB), UAG, and Workspace ONE Access; manage certificate/keys life‑cycle (APNS, TLS, app signing).

· Monitor service health and capacity; tune compliance policies, remediation actions, and deployment rings.Maintain and Publish Proactive Health-check reports across MDM Infrastructure [Such as ACC, UAG, Tunnel Services,Bulk Synch and so on ]

· Design and Define Delivery Optimization and other industry best practices for Mass deployment of Packages / Patches without disruption of operations and network bandwidth

Enrollment & App/Policy Delivery

· Govern Workspace One and Android Enterprise integrations.

· Orchestrate profiles,compliance rules, per‑app VPN/Tunnel, SDK/Proxy settings, and device trust.

· Drive app packaging, staging,and ring‑based rollouts; implement rollback and safety nets.

Security & Identity

· Integrate Workspace ONE Access/IDP for SSO /MFA journeys; ensure conditional access and device posture checks.

· Coordinate with end point security (EDR) and vulnerability management to remediate risks at scale.

· Maintain certificate chains and automate renewals with zero service disruption.

Automation & Analytics

· Automate jobs (smart groups,scripts, APIs), build telemetry and DEX dashboards for experience KPIs.

· Implement auto‑heal playbooks for common failure patterns (enrollment, agent, policy, network).

· Configure required Sensors in Workspace One for deployment, Post Deployment validations and other purposes

Service Management & Governance

· Operate within ITIL processes(Incident/Change/Problem); prepare CAB artefacts (plan, test, rollback,maker‑checker).

· Publish weekly/monthly compliance, enrollment, patch currency, and deployment success reports.

· Vendor liaison(Omnissa/Apple/Google/Microsoft) for escalations, hotfixes, and release readiness.

Mandatory Skills & Experience

· 9–12+ years in EUC/MDM with 4+years hands‑on Workspace ONE UEM (profiles, compliance, app lifecycle,scripting/automation).

· Proven experience with UAG design/operations (HA, upgrades, Tunnel/per‑app VPN) and Workspace ONE Access/VIDM.

· APNS and enterprise app signing; certificate/PKI management.

· Cross‑platform endpoint management (Windows 11, macOS, iOS/iPadOS, Android/BYOD), OS patching at scale.

· Strong troubleshooting/RCA skills; excellent documentation and stakeholder communication.

· ITSM tooling (e.g., Service Now)and disciplined change management.

Good‑to‑Have

· Exposure to Intune/JAMF and identity/PKI stacks.

· Scripting (PowerShell/bash),REST APIs for Workspace ONE; report automation (Power BI/Tableau).

· Experience with DEX/end pointanalytics tools.

Certifications (Preferred)

· Omnissa/VMware Workspace ONE Associate/Professional

· ITIL 4; ServiceNow CSA/CIS