: Forward Engineer – Unified Endpoint Management (Workspace ONE & AI/Agentic Automation)

Job Title: Forward Engineer – Unified Endpoint Management (Workspace ONE)

Department: Modern Workplace / Digital Workplace Engineering & Automation

Employment Type: Full-Time

Location: [Hybrid/On-site]

Experience Level: Mid–Senior (4–8+ years)

Role Overview The Forward Engineer – UEM (Workspace ONE) designs, builds, and deploys scalable enterprise endpoint solutions across multi-OS ecosystems (Windows 11, macOS, iOS, and Android). In this forward-leaning role, you will bridge traditional Modern Endpoint Management with modern Artificial Intelligence, Generative AI, and Agentic Automation. You will develop intelligent workflows, autonomous self-healing device remediations, and AI agent integrations that enhance digital employee experience (DEX) and drive zero-touch IT operations.

Key Responsibilities

1. Multi-OS Unified Endpoint Management (Omnissa / VMware Workspace ONE)

- Cross-Platform Lifecycle Management: Design, configure, and maintain end-to-end device enrollment, configuration profiles, compliance engines, and application deployment across:
- Windows 11: Modern management via OMA-DM, Drop-Ship Provisioning, BitLocker, CSP policies, patch baselines, and PowerShell scripting.macOS: Apple Automated Device Enrollment (ADE), Declarative Device Management (DDM), FileVault, configuration profiles, and Bash/Zsh scripting.iOS / iPadOS: Supervision via Apple Business Manager (ABM), Per-App VPN, Managed App Config, MAM, and supervised security baselines.Android: Android Enterprise (Work Profile, Fully Managed, Dedicated / COSU), OEMConfig integrations, and Google Play for Work distribution.
- Architecture & Infrastructure: Maintain Workspace ONE UEM services, Access (identity/conditional access), Intelligence, Tunnel,



and Unified Access Gateway (UAG) deployments.
- Security & Zero Trust: Enforce posture checks, continuous compliance policies, zero-trust network access (ZTNA), certificate life-cycle management (SCEP/PKI), and automated device quarantine.

2. AI, GenAI & Agentic Automation

- Autonomous Remediation & Self-Healing: Build agentic loops and autonomous routines that interface with Workspace ONE Intelligence and REST APIs to proactively detect, diagnose, and auto-remediate OS and configuration drifts.
- Agentic Workflows & Tool Calling: Design tool-using AI agents capable of executing multi-step UEM operations (e.g., automated triage, policy audits, dynamic group re-assignments).
- GenAI-Assisted Operations: Implement Retrieval-Augmented Generation (RAG) and LLM-assisted tools for helpdesk copilot solutions, energetic policy creation, and automated script translation across shell dialects (PowerShell, Bash, Python).
- Data-Driven Insights: Integrate Workspace ONE Intelligence / Sensors telemetry with AI models to predict hardware degradation, patch failures, or battery and crash anomalies.

3. Engineering & Deployment

- API-First Automation: Build custom integrations and automations using Workspace ONE REST APIs, Webhooks, Python, and PowerShell.
- Documentation & Governance: Maintain infrastructure-as-code or automated deployment documentation, prompt-engineering guidelines, and AI safety guardrails for automated endpoint actions.





Required Technical Skills & Qualifications Core UEM & OS Qualifications

- Experience: 4+ years of hands-on enterprise engineering experience with VMware / Omnissa Workspace ONE UEM (AirWatch), Workspace ONE Access, and Workspace ONE Intelligence.
- Deep Multi-OS Expertise:
- Windows 11: Windows Update for Business (WUfB), BitLocker, CSPs, Win32 software packaging, PowerShell automation.macOS: Apple Business Manager, APNs, configuration profiles, shell scripting (Bash/Zsh), MDM payloads.iOS / Android: Deep knowledge of Apple Push Notification service (APNs), Android Enterprise management modes, AppConfig, and certificate-based authentication.
- Identity & Security: Solid understanding of SAML 2.0, OIDC, PKI/SCEP certificate enrollment, conditional access, and zero-trust architectures.

AI, GenAI & Scripting Competencies

- AI/LLM Principles: Strong working understanding of LLM APIs (OpenAI, Claude, Llama, Azure OpenAI), prompt engineering, embeddings, and structured schema outputs.
- Agentic Frameworks: Conceptual and practical grasp of agentic patterns (function/tool calling, multi-agent orchestration, agent memory, task planning) using frameworks such as LangChain, LangGraph, AutoGen, or CrewAI.
- Programming & Automation: Proficient in Python and PowerShell for API interaction, automation pipelines, and agent tooling.

Preferred Qualifications & Certifications

- Skills:
- Omnissa Workspace ONE. Windows 11, MacOS, Android and IOS.
- Experience with Model Context Protocol (MCP) or tool-augmented LLM infrastructure.
- Experience migrating legacy systems (e.g., GPO, SCCM, co-management) into pure cloud-native modern management.
- Familiarity with DEX tools (Workspace ONE Assist, Freestyle Orchestrator, DEEM).

📌 Unified Endpoint Management (India)
🏢 TaskUs
📍 India