Workspace ONE (Omnissa) – L3 SME/Lead
ITCAN PTE. LIMITED
Architecture & Standards
· Own UEM/Access architecture,configuration baselines, and hardening guidelines for multi‑OS endpoints.
· Design device on-boarding flows(corporate and BYOD), group structures, profile strategy, and lifecycle states.
· Define and maintain documentation: solution design, SOPs/runbooks, and knowledge articles.
Platform Operations (L3)
· Lead L3 incident/problem management: deep diagnosis, RCA, Proactive Problem Management, permanent fixes,and post‑incident actions.
· Plan and execute upgrades/patching for UEM components (Console, Device Services, DB), UAG, and Workspace ONE Access; manage certificate/keys life‑cycle (APNS, TLS, app signing).
· Monitor service health and capacity; tune compliance policies, remediation actions, and deployment rings.Maintain and Publish Proactive Health-check reports across MDM Infrastructure [Such as ACC, UAG, Tunnel Services,Bulk Synch and so on ]
· Design and Define Delivery Optimization and other industry best practices for Mass deployment of Packages / Patches without disruption of operations and network bandwidth
Enrollment & App/Policy Delivery
· Govern Workspace One and Android Enterprise integrations.
· Orchestrate profiles,compliance rules, per‑app VPN/Tunnel, SDK/Proxy settings, and device trust.
· Drive app packaging, staging,and ring‑based rollouts; implement rollback and safety nets.
Security & Identity
· Integrate Workspace ONE Access/IDP for SSO /MFA journeys; ensure conditional access and device posture checks.
· Coordinate with end point security (EDR) and vulnerability management to remediate risks at scale.
· Maintain certificate chains and automate renewals with zero service disruption.
Automation & Analytics
· Automate jobs (smart groups,scripts, APIs), build telemetry and DEX dashboards for experience KPIs.
· Implement auto‑heal playbooks for common failure patterns (enrollment, agent, policy, network).
· Configure required Sensors in Workspace One for deployment, Post Deployment validations and other purposes
Service Management & Governance
· Operate within ITIL processes(Incident/Change/Problem); prepare CAB artefacts (plan, test, rollback,maker‑checker).
· Publish weekly/monthly compliance, enrollment, patch currency, and deployment success reports.
· Vendor liaison(Omnissa/Apple/Google/Microsoft) for escalations, hotfixes, and release readiness.
Mandatory Skills & Experience· 9–12+ years in EUC/MDM with 4+years hands‑on Workspace ONE UEM (profiles, compliance, app lifecycle,scripting/automation).
· Proven experience with UAG design/operations (HA, upgrades, Tunnel/per‑app VPN) and Workspace ONE Access/VIDM.
· APNS and enterprise app signing; certificate/PKI management.
· Cross‑platform endpoint management (Windows 11, macOS, iOS/iPadOS, Android/BYOD), OS patching at scale.
· Strong troubleshooting/RCA skills; excellent documentation and stakeholder communication.
· ITSM tooling (e.g., Service Now)and disciplined change management.
Good‑to‑Have· Exposure to Intune/JAMF and identity/PKI stacks.
· Scripting (PowerShell/bash),REST APIs for Workspace ONE; report automation (Power BI/Tableau).
· Experience with DEX/end pointanalytics tools.
Certifications (Preferred)· Omnissa/VMware Workspace ONE Associate/Professional
· ITIL 4; ServiceNow CSA/CIS