Position Title: TBD Location: Bristol Department: Information Technology Reports To: Head of IT Overview We are seeking a proactive and detail-oriented mobile specialist to own the end-to-end management of our corporate mobile estate—focused on iPhones and iPads. You will design and maintain Jamf-based device configurations and app deployments, manage SIM/carrier, and ensure the fleet’s security, compliance, and lifecycle hygiene. While our wider endpoint stack includes both Intune and Jamf, this role is dedicated to Apple mobile devices in Jamf, collaborating with the broader team where policies intersect (identity, conditional access, networking, and security). Key Responsibilities Architect, implement, and maintain Jamf Pro configurations for iOS/iPadOS: enrolment (ABM/DEP), supervision, profiles (passcode, restrictions, Wi‑Fi/VPN, certificates, email), SSO, and compliance baselines. Own iPhone/iPad lifecycle: procurement, zero‑touch enrolment, kitting, deployment, break/fix, RMA, refresh, and secure decommissioning/wipe. Manage mobile application management (MAM) in Jamf: app packaging, VPP licensing, scoped deployments, version governance, staged rollouts, and rollback procedures. Administer SIM estates and carrier relationships: new lines and ports, plan/right‑sizing, roaming enablement/policies, usage monitoring, cost optimization, invoice reconciliation, and contract renewals. Monitor and remediate device compliance and security posture (encryption, passcode, OS version minimums, managed open‑in, DLP); coordinate with Security for incident response and hardening. Maintain accurate asset and SIM inventory; track chain of custody and ensure audit readiness. Create and maintain documentation, runbooks, and end-user guides for enrolment, support, and device use policies. Provide L2/L3 support for mobile and iPad incidents/requests; collaborate with Service Desk for effective L1 triage and escalations. Plan and run pilots for new iOS/iPadOS releases, device models, and Jamf features; conduct UAT, change communications, and phased rollouts. Integrate with identity and access controls (Okta/Azure AD and Conditional Access signals where applicable), cert-based auth, and network access (Wi‑Fi/EAP). Report on KPIs and trends: compliance rates, OS adoption, app health, inventory accuracy, usage/roaming outliers, and carrier spend; propose continuous improvements. Qualifications 3 years managing enterprise Apple mobile fleets with Jamf Pro (iOS/iPadOS) in a corporate environment. Strong hands-on with supervised deployments, configuration profiles, VPP, and managed app configurations. Familiarity with Okta and Conditional Access concepts sufficient to collaborate across policies and identity (Okta/Azure AD). Proven experience managing carrier services and SIM estates: tariffs, roaming, number management (PAC/STAC), billing analysis, and optimization. Solid grasp of mobile security and privacy controls: encryption, passcode policies, managed open‑in, DLP, app attestation, and OS update governance. Scripting/automation skills. Excellent communication, documentation, and stakeholder management skills. Relevant certifications are a plus. Benefits Competitive salary and benefits package. Opportunities for professional growth and development. Collaborative and supportive work environment.