Job Description
Forward Engineer – Unified Endpoint Management (Workspace ONE & AI/Agentic Automation) Job Title: Forward Engineer – Unified Endpoint Management (Workspace ONE) Department: Modern Workplace / Digital Workplace Engineering & Automation Employment Type: Full-Time

Location:
[Hybrid/On-site] Experience Level: Mid–Senior (4–8+ years) Role Overview The Forward Engineer – UEM (Workspace ONE) designs, builds, and deploys scalable enterprise endpoint solutions across multi-OS ecosystems (Windows 11, macOS, iOS, and Android). In this forward-leaning role, you will bridge traditional Up-to-date Endpoint Management with modern Artificial Intelligence, Generative AI, and Agentic Automation. You will develop intelligent workflows, autonomous self-healing device remediations, and AI agent integrations that enhance digital employee experience (DEX) and drive zero-touch IT operations.

Key Responsibilities
1. Multi-OS Unified Endpoint Management (Omnissa / VMware Workspace ONE)
• Cross-Platform Lifecycle Management: Design, configure, and maintain end-to-end device enrollment, configuration profiles, compliance engines, and application deployment across:
• Windows 11: Modern management via OMA-DM, Drop-Ship Provisioning, BitLocker, CSP policies, patch baselines, and PowerShell scripting.macOS: Apple Automated Device Enrollment (ADE), Declarative Device Management (DDM), FileVault, configuration profiles, and Bash/Zsh scripting.iOS / iPadOS: Supervision via Apple Business Manager (ABM), Per-App VPN, Managed App Config, MAM, and supervised security baselines.
Android: Android Enterprise (Work Profile, Fully Managed, Dedicated / COSU), OEMConfig integrations, and Google Play for Work distribution.
• Architecture & Infrastructure: Maintain Workspace ONE UEM services, Access (identity/conditional access), Intelligence, Tunnel,



and Unified Access Gateway (UAG) deployments.
• Security & Zero Trust: Enforce posture checks, continuous compliance policies, zero-trust network access (ZTNA), certificate life-cycle management (SCEP/PKI), and automated device quarantine. 2. AI, GenAI & Agentic Automation
• Autonomous Remediation & Self-Healing: Build agentic loops and autonomous routines that interface with Workspace ONE Intelligence and REST APIs to proactively detect, diagnose, and auto-remediate OS and configuration drifts.
• Agentic Workflows & Tool Calling: Design tool-using AI agents capable of executing multi-step UEM operations (e.g., automated triage, policy audits, dynamic group re-assignments).
• GenAI-Assisted Operations: Implement Retrieval-Augmented Generation (RAG) and LLM-assisted tools for helpdesk copilot solutions, dynamic policy creation, and automated script translation across shell dialects (PowerShell, Bash, Python).
• Data-Driven Insights: Integrate Workspace ONE Intelligence / Sensors telemetry with AI models to predict hardware degradation, patch failures, or battery and crash anomalies. 3. Engineering & Deployment
• API-First Automation: Build custom integrations and automations using Workspace ONE REST APIs, Webhooks, Python, and PowerShell.
• Documentation & Governance: Maintain infrastructure-as-code or automated deployment documentation, prompt-engineering guidelines, and AI safety guardrails for automated endpoint actions.



Required Technical Skills & Qualifications Core UEM & OS Qualifications
•

Experience:
4+ years of hands-on enterprise engineering experience with VMware / Omnissa Workspace ONE UEM (AirWatch), Workspace ONE Access, and Workspace ONE Intelligence.
• Deep Multi-OS Expertise:
• Windows 11: Windows Update for Business (WUfB), BitLocker, CSPs, Win32 software packaging, PowerShell automation.macOS: Apple Business Manager, APNs, configuration profiles, shell scripting (Bash/Zsh), MDM payloads.iOS / Android: Deep knowledge of Apple Push Notification service (APNs), Android Enterprise management modes, AppConfig, and certificate-based authentication.
• Identity & Security: Solid understanding of SAML 2.0, OIDC, PKI/SCEP certificate enrollment, conditional access, and zero-trust architectures. AI, GenAI & Scripting Competencies
• AI/LLM Principles: Strong working understanding of LLM APIs (OpenAI, Claude, Llama, Azure OpenAI), prompt engineering, embeddings, and structured schema outputs.
• Agentic Frameworks: Conceptual and practical grasp of agentic patterns (function/tool calling, multi-agent orchestration, agent memory, task planning) using frameworks such as LangChain, LangGraph, AutoGen, or CrewAI.
• Programming & Automation: Proficient in Python and PowerShell for API interaction, automation pipelines, and agent tooling. Preferred Qualifications & Certifications
•

Skills:
• Omnissa Workspace ONE. Windows 11, MacOS, Android and IOS.
• Experience with Model Context Protocol (MCP) or tool-augmented LLM infrastructure.
• Experience migrating legacy systems (e.g., GPO, SCCM, co-management) into pure cloud-native modern management.
• Familiarity with DEX tools (Workspace ONE Assist, Freestyle Orchestrator, DEEM).

📌 Unified Endpoint Management (India)
🏢 TaskUs
📍 India