Robert Half have partnered on an exclusive basis with an existing client in the Bristol area to recruit an MDM Engineer / Mobile Device Specialist on a permanent basis.
You will be a proactive and detail-oriented mobile specialist to own the end-to-end management of the corporate mobile estate-focused on iPhones and iPads. You will design and maintain Jamf-based device configurations and app deployments, manage SIM/carrier, and ensure the fleet's security, compliance, and lifecycle hygiene. Whilst the wider endpoint stack includes both Intune and Jamf, this role is dedicated to Apple mobile devices in Jamf, collaborating with the broader team where policies intersect (identity, conditional access, networking, and security).
Key Responsibilities
1. Architect, implement, and maintain Jamf Pro configurations for iOS/iPadOS: enrollment (ABM/DEP), supervision, profiles (passcode, restrictions, Wi‑Fi/VPN, certificates, email), SSO, and compliance baselines.
2. Own iPhone/iPad lifecycle: procurement, zero‑touch enrollment, kitting, deployment, break/fix, RMA, refresh, and secure decommissioning/wipe.
3. Manage mobile application management (MAM) in Jamf: app packaging, VPP licensing, scoped deployments, version governance, staged rollouts, and rollback procedures.
4. Administer SIM estates and carrier relationships: new lines and ports, plan/right‑sizing, roaming enablement/policies, usage monitoring, cost optimization, invoice reconciliation, and contract renewals.
5. Monitor and remediate device compliance and security posture (encryption, passcode, OS version minimums, managed open‑in, DLP); coordinate with Security for incident response and hardening.
6. Maintain accurate asset and SIM inventory; track chain of custody and ensure audit readiness.
7. Create and maintain documentation, runbooks, and end-user guides for enrollment, support, and device use policies.
8. Provide L2/L3 support for mobile and iPad incidents/requests; collaborate with Service Desk for effective L1 triage and escalations.
9. Plan and run pilots for new iOS/iPadOS releases, device models, and Jamf features; conduct UAT, change communications, and phased rollouts.
10. Integrate with identity and access controls (Okta/Azure AD and Conditional Access signals where applicable), cert-based auth, and network access (Wi‑Fi/EAP).
11. Report on KPIs and trends: compliance rates, OS adoption, app health, inventory accuracy, usage/roaming outliers, and carrier spend; propose continuous improvements.
Qualifications
12. 3+ years managing enterprise Apple mobile fleets with Jamf Pro (iOS/iPadOS) in a corporate environment.
13. Strong hands-on with supervised deployments, configuration profiles, VPP, and managed app configurations.
14. Familiarity with Okta and Conditional Access concepts sufficient to collaborate across policies and identity (Okta/Azure AD).
15. Proven experience managing carrier services and SIM estates: tariffs, roaming, number management (PAC/STAC), billing analysis, and optimization.
16. Solid grasp of mobile security and privacy controls: encryption, passcode policies, managed open‑in, DLP, app attestation, and OS update governance.
17. Scripting/automation skills.
18. Excellent communication, documentation, and stakeholder management skills.
19. Relevant certifications are a plus.
Package:
20. circa. £45,000 - £50,000 basic salary
21. Opportunities for professional growth and development.
22. Collaborative and supportive work environment.
23. 3 days per week on site, 2 days remote.
Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to diversity, equity and inclusion. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training.